Lucene search
PRIOn knowledge basePRION:CVE-2022-37041HistoryAug 12, 2022 - 3:15 p.m.
Design/Logic Flaw
2022-08-1215:15:00
PRIOn knowledge base
www.prio-n.com
4
An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. The value of the X-Forwarded-Host header overwrites the value of the Host header in proxied requests. The value of X-Forwarded-Host header is not checked against the whitelist of hosts that ZCS is allowed to proxy to (the zimbraProxyAllowedDomains setting).
| CPE | Name | Operator | Version |
|---|---|---|---|
| collaboration | eq | 9.0.0 | |
| collaboration | eq | 8.8.15 |
Related
osv
osv
CVE-2022-37041
2022-08-12 15:15:16
cvelist
cvelist
CVE-2022-37041
2022-08-11 19:06:49
cve
cve
CVE-2022-37041
2022-08-12 15:15:16
nvd
nvd
CVE-2022-37041
2022-08-12 15:15:16
nessus
nessus