vulnerability

Zimbra Collaboration: CVE-2023-34193: Improper Privilege Management

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
9	(AV:N/AC:L/Au:S/C:C/I:C/A:C)	2023-07-06	2025-01-10	2025-05-19

Severity

CVSS

(AV:N/AC:L/Au:S/C:C/I:C/A:C)

Published

2023-07-06

Added

2025-01-10

Modified

2025-05-19

Description

File upload vulnerability in zimbra zcs 8.8.15 allows an authenticated privileged user to execute arbitrary code and obtain sensitive information via the clientuploader function.

Solution

zimbra-collaboration-upgrade-latest

References

CVE-2023-34193
https://attackerkb.com/topics/CVE-2023-34193
URL-https://wiki.zimbra.com/wiki/Security_Center
URL-https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy
URL-https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today