---
id: 3973
title: "What the Vuln: Zimbra"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/what-the-vuln-zimbra"
published_at: "2023-02-21T00:00:00Z"
tags: ["rce", "vulnerability-research", "path-traversal", "webmail", "zimbra", "cve-2022-27925"]
phying_url: "https://phying.com/item/3973"
lang: en
---

# What the Vuln: Zimbra

## Summary

What the Vuln dissects Zimbra's CVE-2022-27925 path traversal and the CVE-2022-37042 auth bypass, showing how the Network Edition flaw leads to RCE and how to fingerprint the running version.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2023-02-21T00:00:00Z
- **Original:** https://bishopfox.com/blog/what-the-vuln-zimbra
- **Phying News:** https://phying.com/item/3973