Description
Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ↗
- https://wiki.zimbra.com/wiki/Security_Center ↗
- https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24 ↗
- http://packetstormsecurity.com/files/168146/Zimbra-Zip-Path-Traversal.html ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-27925 ↗