Description (CNA)
Zimbra Collaboration (ZCS) before 10.1.12 allows SSRF because of the configuration of the chat proxy.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Zimbra / Collaboration | affected 0 before 10.1.12 |
CWE
CWE-918
References
- https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
- https://wiki.zimbra.com/wiki/Security_Center
- https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.12
- https://blog.zimbra.com/2025/10/patch-release-update-zimbra-10-1-12/
- https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.12#Security_Fixes
ADP enrichment
No English description supplied.
No references supplied.