CVE-2019-9670
CRITICAL KEV NUCLEISynacor Zimbra Collaboration Suite <8.7.11p10 - XXE
Title source: llmExploitation Summary
CVE-2019-9670 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added January 10, 2022.
EIP tracks 6 public exploits from researchers including Metasploit, rek7, attackgithub, including a Metasploit module exploits/linux/http/zimbra_xxe_rce.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits CVE-2019-9670 and CVE-2019-9621 in Zimbra Collaboration Suite, chaining XXE and SSRF vulnerabilities to achieve unauthenticated remote code execution via a JSP webshell upload.
Description
mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as demonstrated by Autodiscover/Autodiscover.xml.
Exploits (6)
This Metasploit module exploits CVE-2019-9670 and CVE-2019-9621 in Zimbra Collaboration Suite, chaining XXE and SSRF vulnerabilities to achieve unauthenticated remote code execution via a JSP webshell upload.
This is a functional exploit for CVE-2019-9670, targeting Zimbra's Autodiscover Servlet XXE and ProxyServlet SSRF vulnerabilities. It extracts credentials via XXE, escalates privileges via SSRF to obtain an admin token, and uploads a payload for RCE.
This is a functional exploit for CVE-2019-9670, targeting Zimbra's Autodiscover Servlet XXE and ProxyServlet SSRF vulnerabilities. It extracts credentials via XXE, escalates privileges via SSRF to obtain an admin token, and uploads a payload for RCE.
This repository contains a Python-based scanner for detecting CVE-2019-9670, a vulnerability in Zimbra Collaboration Suite. The tool checks for the presence of the vulnerability by sending a crafted request and analyzing the response for specific indicators.
This is a Golang-based exploit for CVE-2019-9670, an XXE vulnerability in Zimbra Collaboration 8.7.X < 8.7.11p10. It sends a crafted XML payload to read the /etc/passwd file and checks for vulnerability.
This Metasploit module exploits CVE-2019-9670, an XXE vulnerability in Zimbra Collaboration Suite, to achieve unauthenticated remote code execution by chaining XXE, SSRF, and file upload techniques.
Nuclei Templates (1)
http.title:"zimbra collaboration suite" || http.title:"zimbra web client sign in"
title="zimbra web client sign in" || title="zimbra collaboration suite"
References (7)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H