CVE-2022-41352 PoC — Zimbra Collaboration Suite 路径遍历漏洞

Source

https://github.com/rxerium/CVE-2022-41352

Associated Vulnerability

Title:Zimbra Collaboration Suite 路径遍历漏洞 (CVE-2022-41352)
Description:An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also, pax is in the prerequisites of Zimbra on Ubuntu; however, pax is no longer part of a default Red Hat installation after RHEL 6 (or CentOS 6). Once pax is installed, amavis automatically prefers it over cpio.

Description

Zimbra Collaboration (ZCS) Arbitrary File Upload Vulnerability

Readme

# CVE-2022-41352 PoC

 ## How does this detection method work?

As stated on the advisories an issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0, the template looks at the following versions:

```
          - "8.8.15"
          - "9.0"
```

 ## How do I run this script?

1. Download Nuclei from [here](https://github.com/projectdiscovery/nuclei)
2. Copy the template to your local system
3. Run the following command: `nuclei -u https://yourHost.com -t template.yaml` 

## References

- https://nvd.nist.gov/vuln/detail/cve-2022-41352
- http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html#
- https://forums.zimbra.org/viewtopic.php?t=71153&p=306532


## Disclaimer

Use at your own risk, I will not be responsible for illegal activities you conduct on infrastructure you do not own or have permission to scan.

File Snapshot


 [4.0K]  /data/pocs/5663011bd58c2e3e83f5696a96d6b8bc22ac9096
├── [ 869]  README.md
└── [1.2K]  template.yaml

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!