CVE-2022-27925

HIGH

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.

CVSS v3.1 Score

7.2
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Complexity
LOW
Privileges
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 4/21/2022Modified: 10/1/2026

Related Intelligence (1)

CRITICALZero Day

When Business Email Compromise Starts Rewriting Reality

Business Email Compromise (BEC) operates on a familiar playbook. Threat actors breach a mailbox, silently monitor operations, map approval chains, and ultimately exploit that access to divert funds or exfiltrate sensitive assets. This dynamic is central to our analysis as we kick off a series around Rapid7's collaborative research with Zimbra; upcoming installments will explore technical details a

CVE-2024-45519CVE-2025-27915
Rapid7

References (9)

http://packetstormsecurity.com/files/168146/Zimbra-Zip-Path-Traversal.htmlExploitThird Party Advisoryhttps://wiki.zimbra.com/wiki/Security_CenterVendor Advisoryhttps://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24Release NotesVendor Advisoryhttps://wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesVendor Advisoryhttp://packetstormsecurity.com/files/168146/Zimbra-Zip-Path-Traversal.htmlExploitThird Party Advisoryhttps://wiki.zimbra.com/wiki/Security_CenterVendor Advisoryhttps://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24Release NotesVendor Advisoryhttps://wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesVendor Advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-27925US Government Resource