Synacor · Zimbra Collaboration Suite (ZCS)
CVE-2025-68645
Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
ما هي
A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory.
CISA: Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for remote attackers to craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory.
ما العمل
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
الموعد النهائي للوكالات الفدرالية الأمريكية: 12 فبراير 2026
ثغرات مُستغلّة أخرى من Synacor
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 21/08/2026 | OS Command Injection | Zimbra Collaboration Suite (ZCS) | مرتفع 8.9 | 72% |
| 20/04/2026 | Cross-site Scripting | Zimbra Collaboration Suite (ZCS) | متوسطة 6.1 | 1.7% |
| 18/03/2026 | Cross-Site Scripting | Zimbra Collaboration Suite (ZCS) | مرتفع 7.2 | 20% |
| 17/02/2026 | (ZCS) Server-Side Request Forgery | Zimbra Collaboration Suite | حرجة 9.8 | 94% |
| 07/10/2025 | Cross-site Scripting | Zimbra Collaboration Suite (ZCS) | متوسطة 5.4 | 4.1% |
| 07/07/2025 | Server-Side Request Forgery (SSRF) | Zimbra Collaboration Suite (ZCS) | مرتفع 7.5 | 81% |
| 19/05/2025 | Cross-Site Scripting (XSS) | Zimbra Collaboration Suite (ZCS) | متوسطة 6.1 | 25% |
| 25/02/2025 | Cross-Site Scripting (XSS) | Zimbra Collaboration Suite (ZCS) | حرجة 9.0 | 77% |
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.