PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Các lỗ hổng mới liên tục xuất hiện trên Zimbra - Phần I

blog.viettelcybersecurity.com | research | #rce | #threat-intelligence | #email-security | #vulnerability-analysis | #zimbra | #cve-2022-27925 | #cve-2022-27924
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

First part on Zimbra surveys the critical 2022 flaws (CVE-2022-27924, CVE-2022-27925, CVE-2022-30333, CVE-2022-37042) with patch timeline, noting 72,000+ exposed servers and wide use in Vietnam.
Published
Collected

Related coverage

vulnerability · blog.viettelcybersecurity.com
[CVE-2022-30333] Các lỗ hổng mới liên tục xuất hiện trên Zimbra - Phần II
Part two on Zimbra dissects CVE-2022-30333, an UnRAR path traversal: Windows-style symlinks inside RAR archives escape extraction, letting attackers drop a JSP webshell via Amavis and achieve RCE.
blog · blog.viettelcybersecurity.com
A Saga of Code Executions on Zimbra
Research into Zimbra Collaboration Suite finds at least one potential remote code execution vulnerability across all Zimbra versions, notable for a product with little security history since 2013.
vulnerability · bishopfox.com
What the Vuln: Zimbra
What the Vuln dissects Zimbra's CVE-2022-27925 path traversal and the CVE-2022-37042 auth bypass, showing how the Network Edition flaw leads to RCE and how to fingerprint the running version.
vulnerability · volexity.com
Mass Exploitation of (Un)authenticated Zimbra RCE: CVE-2022-27925
[Note: Volexity has reported all findings in this post to Zimbra. Where an existing contact was known, Volexity has notified local CERTs of compromised Zimbra instances in their constituency. The […]
research · portswigger.net
CSS:the bomb inside your inbox
PortSwigger breaks webmail CSS sanitizers to cross trust boundaries, exfiltrate tokens, control AI browsers by email and steal passwords, with attacks spanning Yahoo, Fastmail, ProtonMail and Gmail.
research · portswigger.net
Splitting the email atom: exploiting parsers to bypass access controls
Email parser discrepancies — quoted values, Unicode overflows, encoded-word, malformed Punycode — become access control bypasses and RCE, with cases against GitHub, Zendesk, GitLab and Joomla.
Back