{"cvss":7.2,"datePublished":"2022-08-11","dateUpdated":"2022-08-11","description":"Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution.","dueDate":"2022-09-01","id":"CVE-2022-27925","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://blog.zimbra.com/2022/08/authentication-bypass-in-mailboximportservlet-vulnerability/;  https://nvd.nist.gov/vuln/detail/CVE-2022-27925","product":"Zimbra Collaboration Suite (ZCS)","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","vendor":"Synacor"}