{"cveID":"CVE-2022-41352","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","dateAdded":"2022-10-20","shortDescription":"Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.","requiredAction":"Apply updates per vendor instructions.","dueDate":"2022-11-10","knownRansomwareCampaignUse":"Unknown","notes":"https://wiki.zimbra.com/wiki/Security_Center;  https://nvd.nist.gov/vuln/detail/CVE-2022-41352","cwes":["CWE-22"],"year":2022,"state":"unmapped","stale_reasons":[],"mappings":[],"techniques":[],"mapping_types":[],"has_exploitation_technique":false,"mapping_attack_versions":[],"mapping_domains":[],"sigma_coverage":null,"sigma_rules_tagged_cve":[],"added_after_mapping_snapshot":false,"_source":"kevmap","_built":"2026-08-23 05:47 UTC","_attack_version":"19.2"}