19 matches found
Zimbra Collaboration Suite 8.8.15/9.0 - Zip Path Traversal
Zimbra Collaboration aka ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal. id: CVE-2022-27925 info: name:...
CVE-2022-27925
CVE-2022-27925 Descrizione Il 10 maggio 2022, Zimbra ha rilasciato le versioni 9.0.0 patch 24 e 8.8.15 patch 31 per affrontare multiple vulnerabilità in Zimbra Collaboration Suite, incluse CVE-2022-27924 di cui abbiamo scritto in precedenza e CVE-2022-27925. Inizialmente, Zimbra ha definito...
CVE-2022-37042
CVE-2022-37042 Usage Visualizza informazioni sulla vulnerabilità. go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / / // // / / / | |/ / /// // // / // /// / / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution. You are responsible...
CVE-2022-27925
Zimbra Collaboration aka ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal...
The vulnerability of the mboximport function in the Zimbra Collaboration Suite email management system allows a hacker to execute arbitrary code.
The vulnerability of the mboximport function in the Zimbra Collaboration Suite email management system is related to authentication deficiencies. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the mboximport function in the Zimbra Collaboration Suite email management system allows a hacker to upload any files into the system.
The vulnerability of the mboximport function in the Zimbra Collaboration Suite email management system involves unlimited loading of files of a malicious nature. Exploiting this vulnerability could allow an attacker to load any files into the system remotely...
Directory traversal
Zimbra Collaboration Suite ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication i.e., not having an authtoken, an attacker can upload arbitrary files to the system, leading to directory traversal and remote code...
CVE-2022-37042: Improper Limitation of a Pathname to a Restricted Directory
Zimbra Collaboration Suite ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication i.e., not having an authtoken, an attacker can upload arbitrary files to the system, leading to directory traversal and remote code...
CVE-2022-37042
Zimbra Collaboration Suite ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication i.e., not having an authtoken, an attacker can upload arbitrary files to the system, leading to directory traversal and remote code...
CVE-2022-37042
Zimbra Collaboration Suite ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication i.e., not having an authtoken, an attacker can upload arbitrary files to the system, leading to directory traversal and remote code...
VulnCheck KEV: CVE-2022-27925
Synacor Zimbra Collaboration Suite ZCS contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution...
PT-2022-4241
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite ZCS versions 8.8.15 through 9.0 Description The mboximport functionality in Zimbra Collaboration Suite ZCS has an authentication bypass issue, allowing an attacker to upload arbitrary files to the system without an...
CVE-2022-27925
Zimbra Collaboration aka ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal...
Directory traversal
Zimbra Collaboration aka ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal...
CVE-2022-27925
Zimbra Collaboration aka ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal. Recent assessments: rbowes-r7 a...
CVE-2022-27925: Improper Limitation of a Pathname to a Restricted Directory
Zimbra Collaboration aka ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal...
CVE-2022-27925
Zimbra Collaboration aka ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal...
CVE-2022-27925
CVE-2022-27925 affects Zimbra Collaboration Suite 8.8.15 and 9.0, where mboximport accepts a ZIP and extracts files. An authenticated administrator can upload arbitrary files, enabling directory traversal. Public PoCs/exploits in connected docs demonstrate path traversal behavior and indicate aff...
PT-2021-7280
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite versions 8.8.15 and 9.0 Description The mboximport function allows an authenticated user with administrator rights to upload a ZIP archive containing arbitrary files. This can lead to directory traversal, which is a...