CVE-2025-53645: High severity Zimbra Collaboration (ZCS) vulnerability
Zimbra Collaboration (ZCS) before 9.0.0 Patch 46, 10.0.x before 10.0.15, and 10.1.x before 10.1.9 is vulnerable to a denial of service condition due to improper handling of excessive, comma-separated path segments in the Admin Console. An unauthenticated remote attacker can send specially crafted GET requests that trigger redundant processing and inflated responses. This leads to uncontrolled resource consumption, resulting in denial of service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53645?
CVE-2025-53645 is classified as a denial of service vulnerability.
How do I fix CVE-2025-53645?
To resolve CVE-2025-53645, upgrade to Zimbra Collaboration (ZCS) version 9.0.0 Patch 46 or later, or 10.0.15 or later, or 10.1.9 or later.
Who is affected by CVE-2025-53645?
CVE-2025-53645 affects Zimbra Collaboration (ZCS) versions prior to 9.0.0 Patch 46, 10.0.15, and 10.1.9.
Can CVE-2025-53645 be exploited remotely?
Yes, CVE-2025-53645 can be exploited by unauthenticated remote attackers.
What kind of attack does CVE-2025-53645 enable?
CVE-2025-53645 enables a denial of service condition due to improper handling of excessive path segments.