cve-2022-27925

HIGH CVSS 7.2 vulncheck_kev

Description

Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution.

Timeline

Published: 2022-08-11 00:00 UTC
Last Modified: 2022-08-11

CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 7.2,
  "datePublished": "2022-08-11T00:00:00Z",
  "dateUpdated": "2022-08-11T00:00:00Z",
  "description": "Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution.",
  "dueDate": "2022-09-01T00:00:00Z",
  "id": "CVE-2022-27925",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Known",
  "product": "Zimbra Collaboration Suite (ZCS)",
  "requiredAction": "Apply updates per vendor instructions.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability",
  "vendor": "Synacor"
}

cve-2022-27925

Raw JSON Data