VDB
BDU%3A2022-05086
BDU%3A2022-05086
PUBLISHED
CVSS 7.5 HIGH
Уязвимость функции mboximport корпоративной системы управления электронной почтой Zimbra Collaboration Suite (ZCS), позволяющая нарушителю загрузить произвольные файлы в систему
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zimbra Inc. | Zimbra Collaboration Suite |
Timeline
- Aug 18, 2022 CVE Published
- Jun 24, 2024 PoC Published
- Jul 17, 2024 PoC Published
- Sep 24, 2024 CVE Updated
References
- https://wiki.zimbra.com/wiki/Security_Center url
- https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24 url
- https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories url
- http://packetstormsecurity.com/files/168146/Zimbra-Zip-Path-Traversal.html url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url