CyberRota Analysis
AI-GeneratedA path traversal vulnerability in the document editing functionality of Zimbra Collaboration prior to version 10.1.17 allows authenticated attackers to exploit improper validation of the packages parameter. This could lead to unauthorized disclosure of sensitive files within the web application directory. Organizations using affected versions of Zimbra should prioritize patching to mitigate potential data exposure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase document editing functionality due to improper validation of the packages parameter. An authenticated attacker can exploit this vulnerability by supplying a crafted path traversal sequence, potentially allowing unauthorized disclosure of sensitive files within the web application directory.