Local file inclusion affecting Zimbra
A critical vulnerability affecting Zimbra would allow an unauthenticated attacker to access arbitrary files on affected systems.
Description
Technical context and vulnerability details
Zimbra is an email solution and collaboration platform that allows you to manage emails, calendars and contacts. It is commonly used in professional environments and offers access via a web interface. This solution is affected by a critical vulnerability labeled CVE‑2025‑68645, resulting from insufficient validation of query parameters provided by a user in the RestFilter servlet. Exploitation of this vulnerability would allow an unauthenticated attacker to send specially crafted HTTP requests to the /h/rest endpoint, leading to unauthorized access to internal files on target systems. It is classified high with a severity score of 8.8 according to CVSS V3.1.
Potential Risks & Impact
Potential consequences upon exploitation
- Compromise of system integrity;
- Data privacy breach;
Affected systems
Products, components and targeted versions
- Zimbra Collaboration Suite versions 10.0 prior to 10.0.18;
- Zimbra Collaboration Suite versions 10.1 prior to 10.1.13;
Recommended Remediations & Actions
Immediate actions and recommended mitigations
- Update Zimbra Collaboration to versions 10.0.18, 10.1.13 or later;
Sources & External Links
Vendor security advisories and documentation
Advisory Specifications
CSIRT Emergency Response
Is your organization affected or do you suspect an incident? Our security experts are available to assist.
Report an incidentGet our alerts by email
Subscribe to receive our security alert bulletins and Iservices news straight to your inbox.