When OnlyOffice/Document Editing is available, an unauthenticated remote attacker with access to an existing supported public Briefcase document can abuse unsigned save fields to perform path-traversal writes and execute commands as zimbra.
| Vendor | Product | Versions |
|---|---|---|
| zimbra | zimbra collaboration suite (zcs) | 0 |
Loading…
