CVE-2022-27924: Synacor Zimbra Collaboration Suite (ZCS) Command Injection
Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability. Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite of arbitrary cached entries.
- CISA KEV-listed (remediation due 2022-08-25)
- used in ransomware campaigns
- EPSS 90.7% (99.6% percentile)