Cr4ckC4t/cve-2022-41352-zimbra-rce

PoC

Zimbra <9.0.0.p27 RCE

view exploit source poc_in_githubauthor Cr4ckC4tpublished 2022-11-11catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-41352US	critical9.8OT critical	95.5% (100th)	KEV	2022-09-26
An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to /opt/zimbra/jetty/web…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.