CVE Vulnerability

CVE-2022-37041

An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. The value of the X-Forwarded-Host header overwrites the value of the Host header in proxied requests. The value of X-Forwarded-Host header is not checked against the whitelist of hosts that ZCS is allowed to proxy to (the zimbraProxyAllowedDomains setting).

7.5 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories Vendor Advisory
https://wiki.zimbra.com/wiki/Security_Center Patch Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:zimbra:collaboration:9.0.0:-:*:*:*:*:*:*
cpe:2.3:a:zimbra:collaboration:8.8.15:-:*:*:*:*:*:*
Information

Published : 2022-08-12 03:15

Updated : 2022-08-16 02:55

NVD link : CVE-2022-37041

Mitre link : CVE-2022-37041

Products Affected
No products.
CWE
CWE-918

Server-Side Request Forgery (SSRF)