Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fh6w-cgmm-fxrj

Опубликовано: 06 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. Remote code execution can occur through ClientUploader by an authenticated admin user. An authenticated admin user can upload files through the ClientUploader utility, and traverse to any other directory for remote code execution.

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. Remote code execution can occur through ClientUploader by an authenticated admin user. An authenticated admin user can upload files through the ClientUploader utility, and traverse to any other directory for remote code execution.

EPSS

Процентиль: 85%
0.02388
Низкий

7.2 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 7.2
nvd
около 3 лет назад

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. Remote code execution can occur through ClientUploader by an authenticated admin user. An authenticated admin user can upload files through the ClientUploader utility, and traverse to any other directory for remote code execution.

EPSS

Процентиль: 85%
0.02388
Низкий

7.2 High

CVSS3

Дефекты

CWE-434