CVE-2022-27925

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite versions 8.8.15 and 9.0

Description The mboximport function allows an authenticated user with administrator rights to upload a ZIP archive containing arbitrary files. This can lead to directory traversal, which is a method used to access files and directories that are stored outside the web root folder. An attacker could exploit this to upload dangerous file types to the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.