CVE-2022-41352 PoC — Zimbra Collaboration Suite 路径遍历漏洞

Source

https://github.com/rxerium/CVE-2022-41352

Associated Vulnerability

Title: Zimbra Collaboration Suite 路径遍历漏洞 (CVE-2022-41352)
Description:An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also, pax is in the prerequisites of Zimbra on Ubuntu; however, pax is no longer part of a default Red Hat installation after RHEL 6 (or CentOS 6). Once pax is installed, amavis automatically prefers it over cpio.

Description

Zimbra Collaboration (ZCS) Arbitrary File Upload Vulnerability

Readme

# CVE-2022-41352 PoC

 ## How does this detection method work?

As stated on the advisories an issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0, the template looks at the following versions:

```
          - "8.8.15"
          - "9.0"
```

 ## How do I run this script?

1. Download Nuclei from [here](https://github.com/projectdiscovery/nuclei)
2. Copy the template to your local system
3. Run the following command: `nuclei -u https://yourHost.com -t template.yaml` 

## References

- https://nvd.nist.gov/vuln/detail/cve-2022-41352
- http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html#
- https://forums.zimbra.org/viewtopic.php?t=71153&p=306532


## Disclaimer

Use at your own risk, I will not be responsible for illegal activities you conduct on infrastructure you do not own or have permission to scan.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →