{"cvss":9.8,"datePublished":"2022-10-20","dateUpdated":"2022-10-20","description":"Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.","dueDate":"2022-11-10","id":"CVE-2022-41352","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://wiki.zimbra.com/wiki/Security_Center;  https://nvd.nist.gov/vuln/detail/CVE-2022-41352","product":"Zimbra Collaboration Suite (ZCS)","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","vendor":"Synacor"}