Zimbra Collaboration Suite Remote Code Execution Vulnerability

Zimbra Collaboration Suite (ZCS) is an open source collaborative office suite. The product includes WebMail, Calendar, Address Book, etc. A security vulnerability exists in Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0, which stems from a lack of valid authentication of uploaded files by the application. An unauthenticated remote attacker could exploit the vulnerability to write arbitrary files to any path on the user-accessible file system, which could enable the planting of a shell in the Web root directory, ultimately leading to arbitrary code execution on the target system.