H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2022-41352

Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.

Vulnerability
TypeVulnerability
External ID—
First seen2022-10-20
Last seen2022-10-20

Confidence

—

Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.

Labels

exploitedkev

CISA KEV context

Vendor / productSynacor Zimbra Collaboration Suite (ZCS)
Added2022-10-20
Due date2022-11-10
6 recorded

Relationships

mitigates
from Remediate CVE-2022-41352
Mitigation
related-to
to Manipulating Web Input to File System Calls
Technique
related-to
to Path Traversal
Technique
related-to
to Using Escaped Slashes in Alternate Encoding
Technique
related-to
to Using Slashes and URL Encoding Combined to Bypass Validation Logic
Technique
related-to
to Using Slashes in Alternate Encoding
Technique
2 external

References

nvd
CVE-2022-41352
open
cwe
CWE-22
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance