Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Date added (CISA)
2022-10-20
Remediation due
2022-11-10
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.