CVE-2022-41352

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also, pax is in the prerequisites of Zimbra on Ubuntu; however, pax is no longer part of a default Red Hat installation after RHEL 6 (or CentOS 6). Once pax is installed, amavis automatically prefers it over cpio.

• CWE-22
• CWE-22

• http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.htmlExploit, Third Party Advisory, VDB Entry
• https://forums.zimbra.org/viewtopic.php?t=71153&p=306532Mitigation, Vendor Advisory
• https://wiki.zimbra.com/wiki/Security_CenterPatch, Release Notes, Vendor Advisory
• https://wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesVendor Advisory
• https://www.secpod.com/blog/unpatched-rce-bug-in-zimbra-collaboration-suite-exploited-in-wild/Third Party Advisory
• http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.htmlExploit, Third Party Advisory, VDB Entry
• https://forums.zimbra.org/viewtopic.php?t=71153&p=306532Mitigation, Vendor Advisory
• https://wiki.zimbra.com/wiki/Security_CenterPatch, Release Notes, Vendor Advisory
• https://wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesVendor Advisory
• https://www.secpod.com/blog/unpatched-rce-bug-in-zimbra-collaboration-suite-exploited-in-wild/Third Party Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41352US Government Resource

Published

Sep 26, 2022

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-41347An issue was discovered in Zimbra Collaboration (ZCS) 8.8.x …7.8
• CVE-2022-41348An issue was discovered in Zimbra Collaboration (ZCS) 9.0. X…6.1
• CVE-2022-41349In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/co…6.1
• CVE-2022-4135Heap buffer overflow in GPU in Google Chrome prior to 107.0.…9.6
• CVE-2022-41350In Zimbra Collaboration Suite (ZCS) 8.8.15, /h/search?action…6.1
• CVE-2022-41351In Zimbra Collaboration Suite (ZCS) 8.8.15, at the URL /h/ca…6.1
• CVE-2022-41354An access control issue in Argo CD v2.4.12 and below allows …4.3
• CVE-2022-41355Online Leave Management System v1.0 was discovered to contai…7.2
• CVE-2022-41358A stored cross-site scripting (XSS) vulnerability in Garage …5.4
• CVE-2022-4136Dangerous method exposed which can lead to RCE in qmpass/lea…9.8
• CVE-2022-4137A reflected cross-site scripting (XSS) vulnerability was fou…6.1
• CVE-2022-41376Metro UI v4.4.0 to v4.5.0 was discovered to contain a reflec…6.1