CVE-2022-37042

Vulnerability ID

CVE-2022-37042

Severity

CRITICAL

Severity Score

9.8

Summary

Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication (i.e., not having an authtoken), an attacker can upload arbitrary files to the system, leading to directory traversal and remote code execution. NOTE: this issue exists because of an incomplete fix for CVE-2022-27925.

References

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

https://wiki.zimbra.com/wiki/Security_Center

http://packetstormsecurity.com/files/168146/Zimbra-Zip-Path-Traversal.html

Mitigation and Patches

https://wiki.zimbra.com/wiki/Security_Center

Exploits

https://github.com/0xf4n9x/CVE-2022-37042

https://github.com/aels/CVE-2022-37042

https://github.com/GreyNoise-Intelligence/Zimbra_CVE-2022-37042-_CVE-2022-27925

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

https://github.com/GreyNoise-Intelligence/Zimbra_CVE-2022-37042-_CVE-2022-27925