← Back

CVE-2025-25065

nvd nist
Published: Feb 3, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

SSRF vulnerability in the RSS feed parser in Zimbra Collaboration 9.0.0 before Patch 43, 10.0.x before 10.0.12, and 10.1.x before 10.1.4 allows unauthorized redirection to internal network endpoints.

Affected (47)

1 product
Zimbra Collaboration Suite
Configuration A
47 vulnerable
Vulnerable SoftwareAffected Versions
Synacor
Before 9.0.0
From 10.0.0 to 10.0.12
From 10.1.0 to 10.1.4
Version 9.0.0
Version 9.0.0 p10
Version 9.0.0 p11
Version 9.0.0 p12
Version 9.0.0 p13
Version 9.0.0 p14
Version 9.0.0 p15
Version 9.0.0 p16
Version 9.0.0 p17
Version 9.0.0 p18
Version 9.0.0 p19
Version 9.0.0 p1
Version 9.0.0 p20
Version 9.0.0 p21
Version 9.0.0 p22
Version 9.0.0 p23
Version 9.0.0 p24.1
Version 9.0.0 p24
Version 9.0.0 p25
Version 9.0.0 p26
Version 9.0.0 p27
Version 9.0.0 p28
Version 9.0.0 p29
Version 9.0.0 p2
Version 9.0.0 p30
Version 9.0.0 p31
Version 9.0.0 p32
Version 9.0.0 p33
Version 9.0.0 p34
Version 9.0.0 p35
Version 9.0.0 p36
Version 9.0.0 p37
Version 9.0.0 p38
Version 9.0.0 p39
Version 9.0.0 p3
Version 9.0.0 p40
Version 9.0.0 p41
Version 9.0.0 p42
Version 9.0.0 p4
Version 9.0.0 p5
Version 9.0.0 p6
Version 9.0.0 p7
Version 9.0.0 p8
Version 9.0.0 p9

Timeline

No history available yet.