CVE-2022-41352

critical CISA KEV

Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

Vendor / product: Synacor — Zimbra Collaboration Suite (ZCS)

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also, pax is in the prerequisites of Zimbra on Ubuntu; however, pax is no longer part of a default Red Hat installation after RHEL 6 (or CentOS 6). Once pax is installed, amavis automatically prefers it over cpio.

CVSS

9.8

9.8 (CVSS v3.1)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity source: NVD CVSS v3.1 (nvd@nist.gov)

Timeline (UTC)

Published: 2022-09-26 02:15

Modified: 2026-09-10 04:17

NVD status: Analyzed

Last synced 1 day ago

Verified against the source API 2026-10-27 07:07 UTC

Exploitation

Listed in CISA KEV

Added 2022-10-20 · due 2022-11-10

Known ransomware use: Known

Required action (CISA)

Apply updates per vendor instructions.

Affected products

synacor / zimbra_collaboration_suite 9.0.0, 8.8.15

Weakness classification (CWE)

CWE-22

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Vendor advisory: https://forums.zimbra.org/viewtopic.php?t=71153&p=306532

Vendor advisory: https://wiki.zimbra.com/wiki/Security_Center

Vendor advisory: https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

Vendor advisory: https://forums.zimbra.org/viewtopic.php?t=71153&p=306532

Vendor advisory: https://wiki.zimbra.com/wiki/Security_Center

Vendor advisory: https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

Patch / mitigation: https://forums.zimbra.org/viewtopic.php?t=71153&p=306532

Patch / mitigation: https://wiki.zimbra.com/wiki/Security_Center

Patch / mitigation: https://forums.zimbra.org/viewtopic.php?t=71153&p=306532

Patch / mitigation: https://wiki.zimbra.com/wiki/Security_Center

References

http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.... cve@mitre.org
https://forums.zimbra.org/viewtopic.php?t=71153&p=306532 cve@mitre.org
https://wiki.zimbra.com/wiki/Security_Center cve@mitre.org
https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories cve@mitre.org
https://www.secpod.com/blog/unpatched-rce-bug-in-zimbra-collaboration-suite-exploited-in-w... cve@mitre.org
http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.... af854a3a-2127-422b-91ae-364da2661108
https://forums.zimbra.org/viewtopic.php?t=71153&p=306532 af854a3a-2127-422b-91ae-364da2661108
https://wiki.zimbra.com/wiki/Security_Center af854a3a-2127-422b-91ae-364da2661108
https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories af854a3a-2127-422b-91ae-364da2661108
https://www.secpod.com/blog/unpatched-rce-bug-in-zimbra-collaboration-suite-exploited-in-w... af854a3a-2127-422b-91ae-364da2661108
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41352 134c704f-9b21-4f2e-91b3-4a467353bcc0

Data sources

CISA KEV — fetched 2026-10-27 06:50 UTC · record ↗

NVD CVE API 2.0 — fetched 2026-10-27 07:07 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

CVE-2022-41352

Required action (CISA)

Affected products

Weakness classification (CWE)

Mitigation & advisories

References

Data sources

Learn the basics

Related CVEs