CVE-2024-45519
CRITICAL KEV NUCLEIZimbra Collaboration <8.8.15-9.0.0-10.0.9-10.1.1 - Command Injection
Title source: llmExploitation Summary
CVE-2024-45519 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added October 3, 2024. EIP tracks 3 public exploits from researchers including Chocapikk, p33d, sec13b. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository contains a functional exploit for CVE-2024-45519, targeting Zimbra Collaboration's `postjournal` service. The exploit leverages SMTP command injection to achieve unauthenticated remote code execution via a crafted RCPT TO command.
Description
The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.
Exploits (3)
The repository contains a functional exploit for CVE-2024-45519, targeting Zimbra Collaboration's `postjournal` service. The exploit leverages SMTP command injection to achieve unauthenticated remote code execution via a crafted RCPT TO command.
This repository contains a functional exploit PoC for CVE-2024-45519, targeting an SMTP server vulnerability. The script checks for the vulnerability by sending a crafted RCPT TO command with command injection and, if successful, establishes a reverse shell.
This repository contains a functional exploit for CVE-2024-45519, targeting Zimbra's SMTP service. The exploit leverages command injection via crafted email addresses to achieve remote code execution (RCE) and uses Interactsh for out-of-band interaction detection.
Nuclei Templates (1)
http.title:"zimbra collaboration suite" || http.title:"zimbra web client sign in" || http.favicon.hash:1624375939
title="zimbra web client sign in" || title="zimbra collaboration suite"
References (8)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H