CVE-2023-34193: Malicious File Upload
Published Jul 6, 2023
·Updated
File Upload vulnerability in Zimbra ZCS 8.8.15 allows an authenticated privileged user to execute arbitrary code and obtain sensitive information via the ClientUploader function.
Affected Software
37 affected components
Zimbra Collaboration=8.8.15
Zimbra Collaboration=8.8.15-p1
Zimbra Collaboration=8.8.15-p10
Zimbra Collaboration=8.8.15-p11
Zimbra Collaboration=8.8.15-p12
Zimbra Collaboration=8.8.15-p13
Zimbra Collaboration=8.8.15-p14
Zimbra Collaboration=8.8.15-p15
Zimbra Collaboration=8.8.15-p16
Zimbra Collaboration=8.8.15-p17
Zimbra Collaboration=8.8.15-p18
Zimbra Collaboration=8.8.15-p19
Zimbra Collaboration=8.8.15-p2
Zimbra Collaboration=8.8.15-p20
Zimbra Collaboration=8.8.15-p21
Zimbra Collaboration=8.8.15-p22
Zimbra Collaboration=8.8.15-p23
Zimbra Collaboration=8.8.15-p24
Zimbra Collaboration=8.8.15-p25
Zimbra Collaboration=8.8.15-p26
Zimbra Collaboration=8.8.15-p27
Zimbra Collaboration=8.8.15-p28
Zimbra Collaboration=8.8.15-p29
Zimbra Collaboration=8.8.15-p3
Zimbra Collaboration=8.8.15-p30
Zimbra Collaboration=8.8.15-p31
Zimbra Collaboration=8.8.15-p32
Zimbra Collaboration=8.8.15-p33
Zimbra Collaboration=8.8.15-p34
Zimbra Collaboration=8.8.15-p35
Zimbra Collaboration=8.8.15-p37
Zimbra Collaboration=8.8.15-p4
Zimbra Collaboration=8.8.15-p5
Zimbra Collaboration=8.8.15-p6
Zimbra Collaboration=8.8.15-p7
Zimbra Collaboration=8.8.15-p8
Zimbra Collaboration=8.8.15-p9
Event History
Jul 6, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this Zimbra ZCS file upload vulnerability?
The vulnerability ID for this Zimbra ZCS file upload vulnerability is CVE-2023-34193.
2
What is the severity level of CVE-2023-34193?
The severity level of CVE-2023-34193 is high with a score of 8.8.
3
What software versions are affected by CVE-2023-34193?
CVE-2023-34193 affects Zimbra Collaboration 8.8.15 and its subsequent versions.
4
How can an authenticated privileged user exploit CVE-2023-34193?
An authenticated privileged user can exploit CVE-2023-34193 by executing arbitrary code and obtaining sensitive information via the ClientUploader function.
5
Where can I find more information about Zimbra security advisories?
You can find more information about Zimbra security advisories on the Zimbra Security Advisories page of the Zimbra Wiki.