Zimbra developers released the Zimbra Daffodil 10.1.17 security update to fix vulnerabilities that affect all versions of Zimbra. An attacker could exploit some of these vulnerabilities to trigger cross-site scripting, information leakage and authentication bypass on the targeted system.

Users are advised to use the latest versions of Zimbra - Zimbra Daffodil 10.1.17 releases and higher.

Source: zimbra.com