Exploit / PoCcriticalExploited in the wild

Zimbra urges customers to manually fix actively exploited zero

Security Affairsby @securityaffairsJul 13, 2023 · 20:12 UTC (Jul 13, 2023)2 min read1 · 1 read

Read at securityaffairs.com

Analyze CVE-2022-41352 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-41352 CVE-2022-27925

Tags: cve-2022-41352 cve-2022-27925 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-27925	Authenticated Path Traversal File Upload Leading to RCE in Zimbra Collaboration Suite	7.2	99%	KEVRansomwarePoC	Apr 21, 2022 KEV Aug 11, 2022
CVE-2022-41352	Path Traversal Arbitrary File Upload in Synacor Zimbra Collaboration Suite	9.8	95%	KEVRansomwarePoC	Sep 26, 2022 KEV Oct 20, 2022

From the original article

2 min read at securityaffairs.com

Zimbra has released updates to address a zero-day vulnerability actively exploited in attacks aimed at Zimbra Collaboration Suite (ZCS) email servers. Zimbra urges customers to manually install updates to fix a zero-day vulnerability that is actively exploited in attacks against Zimbra Collaboration Suite (ZCS) email servers.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.