Server side request forgery (ssrf)

2019-05-2922:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component.

CPENameOperatorVersion
zimbra_collaboration_suiteeq8.7.11 p1
zimbra_collaboration_suiteeq8.7.11 p2
zimbra_collaboration_suiteeq8.7.11 p3
zimbra_collaboration_suiteeq8.7.11 p4
zimbra_collaboration_suiteeq8.7.11 p5
zimbra_collaboration_suiteeq8.7.11 p6
zimbra_collaboration_suiteeq8.7.11 p7
zimbra_collaboration_suiteeq8.7.11 p8
zimbra_collaboration_suiteeq8.7.11 p9
zimbra_collaboration_suiteeq8.7.11

Name	Operator	Version
zimbra_collaboration_suite	eq	8.7.11 p1
zimbra_collaboration_suite	eq	8.7.11 p2
zimbra_collaboration_suite	eq	8.7.11 p3
zimbra_collaboration_suite	eq	8.7.11 p4
zimbra_collaboration_suite	eq	8.7.11 p5
zimbra_collaboration_suite	eq	8.7.11 p6
zimbra_collaboration_suite	eq	8.7.11 p7
zimbra_collaboration_suite	eq	8.7.11 p8
zimbra_collaboration_suite	eq	8.7.11 p9
zimbra_collaboration_suite	eq	8.7.11