Umbra Wiki cve cve/CVE-2022-27925
Back to wiki

CVE-2022-27925 — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

provenance: imported · CVE: CVE-2022-27925 · CWE: CWE-22

CVE-2022-27925: Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

CISA Known Exploited Vulnerability (KEV)

Vendor / project Synacor
Product Zimbra Collaboration Suite (ZCS)
Date added 2022-08-11
Due date 2022-09-01
Ransomware campaign use Known

Description

Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://blog.zimbra.com/2022/08/authentication-bypass-in-mailboximportservlet-vulnerability/; https://nvd.nist.gov/vuln/detail/CVE-2022-27925

Weakness behind it

CISA records this vulnerability as an instance of CWE-22. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

  • NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-27925
  • KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

See all 1,745 pages under Vulnerabilities (CVE) →