Zimbra Collaboration Suite ProxyServlet Server Side Request Forgery

🗓️ 06 Jun 2019 00:00:00Reported by SAINT CorporationType

saint🔗 download.saintcorporation.com👁 138 Views

Zimbra Collaboration Suite ProxyServlet Server Side Request Forgery allows remote attacker to upload arbitrary files using XML External Entity injection

Reporter	Title	Published	Views	Family All 25
0day.today	Zimbra Collaboration Autodiscover Servlet XXE / ProxyServlet SSRF Exploit	11 Apr 201900:00	–	zdt
0day.today	Zimbra < 8.8.11 - XML External Entity Injection / Server-Side Request Forgery Vulnerability	6 Jun 201900:00	–	zdt
GithubExploit	Exploit for Server-Side Request Forgery in Synacor Zimbra_Collaboration_Suite	6 May 201915:47	–	githubexploit
ATTACKERKB	Zimbra Collaboration Suite ProxyServlet SSRF	30 Apr 201900:00	–	attackerkb
BDU FSTEC	The vulnerability of the Zimbra Collaboration Suite’s email management system, which stems from insufficient validation of incoming requests, allows attackers to carry out SRF attacks.	16 Oct 202400:00	–	bdu_fstec
Circl	CVE-2019-9621	10 Apr 201917:38	–	circl
CISA KEV Catalog	Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability	7 Jul 202500:00	–	cisa_kev
CISA	CISA Adds Four Known Exploited Vulnerabilities to Catalog	7 Jul 202512:00	–	cisa
CVE	CVE-2019-9621	30 Apr 201917:40	–	cve
Cvelist	CVE-2019-9621	30 Apr 201917:40	–	cvelist

06 Jun 2019 00:00Current

8High risk

Vulners AI Score8

EPSS0.80906