CVE-2022-41352—Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

PUBLISHEDvulnerability record

2022-10-20 · last modified September 9, 2026

Metadata

CVE ID:: CVE-2022-41352
Project:: Synacor
Product:: Zimbra Collaboration Suite (ZCS)
Date Added:: 2022-10-20
Due Date:: 2022-11-10
Last Updated:: September 9, 2026

Vulnerability Name

Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

Description

Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:: KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

Related Weaknesses

browse all CVEs