CVE-2022-41347

概要

参考情報

• darrenmartyn.ie/2021/10/25/zimbra-nginx-local-root-exploit · Exploit
• darrenmartyn/zimbra-hinginx · Third Party Advisory
• wiki.zimbra.com/wiki/Security_Center · Patch
• wiki.zimbra.com/wiki/Zimbra_Security_Advisories · Vendor Advisory

collaboration のその他の脆弱性

• CVE-2025-67809中 4.7An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A hardcoded Flickr API key and secret are present in the publicly acces…
• CVE-2024-45515中 6.1An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A Cross-Site Scripting (XSS) vulnerability exists in Zimbra webmail due …
• CVE-2025-27914中 5.4An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A Reflected Cross-Site Scripting (XSS) vulnerability exists in …
• CVE-2024-45518高 8.8An issue was discovered in Zimbra Collaboration (ZCS) 10.1.x before 10.1.1, 10.0.x before 10.0.9, 9.0.0 before Patch 41, and 8.8.15 before P…
• CVE-2024-33536中 5.4An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The vulnerability occurs due to inadequate input validation of the res p…