Umbra Wiki cve cve/CVE-2022-27925
Back to wiki

CVE-2022-27925 — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

provenance: imported · CVE: CVE-2022-27925

CVE-2022-27925: Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

CISA Known Exploited Vulnerability (KEV)

Vendor / project Synacor
Product Zimbra Collaboration Suite (ZCS)
Date added 2022-08-11
Due date 2022-09-01
Ransomware campaign use Known

Description

Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://blog.zimbra.com/2022/08/authentication-bypass-in-mailboximportservlet-vulnerability/; https://nvd.nist.gov/vuln/detail/CVE-2022-27925

References

  • NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-27925
  • KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog