CVE-2026-73573 - In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase document editing functionality due to improper validation of the packages parameter. An authenticated attacker can exploit this vulnerability by supplying a crafted path traversal sequence, potentially allowing unauthorized disclosure of sensitive files within the web application directory. - 漏洞详情

漏洞编号：CVE-2026-73573

风险等级：低危

漏洞来源：CVE

CVE 编号：CVE-2026-73573

CNNVD 编号：-

厂商/产品：synacor / zimbra_collaboration_suite

影响范围：cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*

CWE：CWE-24

发布/更新时间：2026-08-13 / 2026-08-28

漏洞描述

In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase document editing functionality due to improper validation of the packages parameter. An authenticated attacker can exploit this vulnerability by supplying a crafted path traversal sequence, potentially allowing unauthorized disclosure of sensitive files within the web application directory.

漏洞描述

相关链接

相关漏洞