In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-38750.json"