← Database

CVE-2022-27925

HIGH CVSS: 7.2 Published: 2022-04-21 Modified: 2026-08-04

Description

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.

Affected Platforms

Synacor Zimbra Collaboration Suite

Weakness Type

CWE-22, CWE-22

References