CVE-2024-54663

An issue was discovered in the Webmail Classic UI in Zimbra Collaboration ZCS 9.0 and 10.0 and 10.1. A Local File Inclusion LFI vulnerability exists in the /h/rest endpoint, allowing authenticated remote attackers to include and access sensitive files in the WebRoot directory. Exploitation requir...

CVE-2024-54663

creationtimestamp| type| source ---|---|--- 2024-12-19 22:20:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113681812653957542 2024-12-19 23:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoyujoem62v 2024-12-20 00:51:24+00:00| seen|...

CVE-2024-54663

An issue was discovered in the Webmail Classic UI in Zimbra Collaboration ZCS 9.0 and 10.0 and 10.1. A Local File Inclusion LFI vulnerability exists in the /h/rest endpoint, allowing authenticated remote attackers to include and access sensitive files in the WebRoot directory. Exploitation requir...

CVE-2024-54663

A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) versions 9.0, 10.0, and 10.1 . The flaw is located in the /h/rest endpoint, where an authenticated remote attacker can include and access sensitive files within the WebRoot directory by craft...

CVE-2024-54663

An issue was discovered in the Webmail Classic UI in Zimbra Collaboration ZCS 9.0 and 10.0 and 10.1. A Local File Inclusion LFI vulnerability exists in the /h/rest endpoint, allowing authenticated remote attackers to include and access sensitive files in the WebRoot directory. Exploitation requir...