{"revision":"32c373b6d5114b2a8523ce2d76a6e729","evidence":{"cve":"CVE-2022-27925","kev":{"cve":"CVE-2022-27925","product":"Zimbra Collaboration Suite (ZCS)","name":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","dateAdded":"2022-08-11","dueDate":"2022-09-01","knownRansomwareUse":true,"shortDescription":"Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution.","vendor":"Synacor","isMicrosoft":false,"products":[],"advisoryUrl":"https://blog.zimbra.com/2022/08/authentication-bypass-in-mailboximportservlet-vulnerability/","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-27925","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-27925"},"epss":null,"observedAt":"2026-10-23T16:01:26.7735792+00:00","kevRetained":false,"reviewIdentity":"d154c76ee193a278837125da"}}