漏洞描述
Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML external entity injection (XXE) vulnerability via the mailboxd component.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
wiki.zimbra.comhttps://wiki.zimbra.com/wiki/Zimbra_Security_Advisories↗bugzilla.zimbra.comhttps://bugzilla.zimbra.com/show_bug.cgi?id=109129↗packetstormsecurity.comhttp://packetstormsecurity.com/files/152487/Zimbra-Collaboration-Autodiscover-Servlet-XXE-ProxyServlet-SSRF.html↗isc.sans.eduhttps://isc.sans.edu/forums/diary/CVE20199670+Zimbra+Collaboration+Suite+XXE+vulnerability/27570/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2019-9670↗