Security Advisory
CVE-2022-27925
7.2
HIGH
Vulnerability Description
Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.
Published Date
April 21, 2022
Official Source
NIST NVD Advisory