CVE-2022-27925

CVE-2022-27925 Descrizione Il 10 maggio 2022, Zimbra ha rilasciato le versioni 9.0.0 patch 24 e 8.8.15 patch 31 per affrontare multiple vulnerabilità in Zimbra Collaboration Suite, incluse CVE-2022-27924 di cui abbiamo scritto in precedenza e CVE-2022-27925. Inizialmente, Zimbra ha definito...

CVE-2022-37042

CVE-2022-37042 Usage Visualizza informazioni sulla vulnerabilità. root@kitploit: go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / / // // / / / | |/ / /// // // / // /// / / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution. You...

CVE-2022-27925

Zimbra Collaboration aka ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal...

The vulnerability of the mboximport function in the Zimbra Collaboration Suite email management system allows a hacker to execute arbitrary code.

The vulnerability of the mboximport function in the Zimbra Collaboration Suite email management system is related to authentication deficiencies. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the mboximport function in the Zimbra Collaboration Suite email management system allows a hacker to upload any files into the system.

The vulnerability of the mboximport function in the Zimbra Collaboration Suite email management system involves unlimited loading of files of a malicious nature. Exploiting this vulnerability could allow an attacker to load any files into the system remotely...

Directory traversal

Zimbra Collaboration Suite ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication i.e., not having an authtoken, an attacker can upload arbitrary files to the system, leading to directory traversal and remote code...

CVE-2022-37042

Zimbra Collaboration Suite ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication i.e., not having an authtoken, an attacker can upload arbitrary files to the system, leading to directory traversal and remote code...

CVE-2022-37042

Zimbra Collaboration Suite ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication i.e., not having an authtoken, an attacker can upload arbitrary files to the system, leading to directory traversal and remote code...

PT-2022-4241

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite ZCS versions 8.8.15 through 9.0 Description The mboximport functionality in Zimbra Collaboration Suite ZCS has an authentication bypass issue, allowing an attacker to upload arbitrary files to the system without an...

VulnCheck KEV: CVE-2022-27925

Synacor Zimbra Collaboration Suite ZCS contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution...

CVE-2022-27925

Zimbra Collaboration aka ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal...

Directory traversal

Zimbra Collaboration aka ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal...

CVE-2022-27925

Zimbra Collaboration aka ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal. Recent assessments: rbowes-r7 a...

CVE-2022-27925

Zimbra Collaboration aka ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal...

CVE-2022-27925

CVE-2022-27925 affects Zimbra Collaboration Suite 8.8.15 and 9.0, where mboximport accepts a ZIP and extracts files. An authenticated administrator can upload arbitrary files, enabling directory traversal. Public PoCs/exploits in connected docs demonstrate path traversal behavior and indicate aff...

PT-2021-7280

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite versions 8.8.15 and 9.0 Description The mboximport functionality allows an authenticated user with administrator rights to upload a ZIP archive and extract files from it. Due to unrestricted upload of dangerous file...