CVE-2025-68645

Published Dec 22, 2025

Last updated a month ago

Zimbra ZCS

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-68645 is a Local File Inclusion (LFI) vulnerability found in the Webmail Classic UI of Zimbra Collaboration (ZCS) versions 10.0 and 10.1. This vulnerability stems from the improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can exploit this vulnerability by crafting requests to the `/h/rest` endpoint. This allows the attacker to influence internal request dispatching, leading to the inclusion of arbitrary files from the WebRoot directory.

Description: A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory.
Source: cve@mitre.org
NVD status: Analyzed
Products: zimbra_collaboration_suite

Risk scores

CVSS 3.1

Type: Secondary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
Exploit added on: Jan 22, 2026
Exploit action due: Feb 12, 2026
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-98

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7D423DB3-FCD4-445F-A778-BC5F83E01953",
            "versionEndExcluding": "10.0.18",
            "versionStartIncluding": "10.0.0"
          },
          {
            "criteria": "cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7C3F6B1E-1671-461B-A093-7B6854C227FE",
            "versionEndExcluding": "10.1.13",
            "versionStartIncluding": "10.1.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.