CVE-2022-27925: Synacor Zimbra Collaboration Suite (ZCS): aktif olarak istismar edilen açık

Açıklama (NVD)

Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution.

Özet bilgiler

EPSS

%98,68 (yüzdelik 100)

Yama

Yok / bilinmiyor

KEV

Eklenme: 2022-08-11 · Son tarih: 2022-09-01 · fidye yazılımı kampanyalarında kullanıldı

Gerekli aksiyon: Apply updates per vendor instructions.

Kaynaklar

• NVD kaydı
• CISA KEV kataloğu