Description
Zimbra Collaboration contains a local file inclusion vulnerability caused by improper handling of user-supplied input in a REST servlet component. Due to insufficient validation of request parameters, an unauthenticated remote attacker can craft requests that force the application to include arbitrary files from within the web root directory.
Remediation
Upgrade Zimbra Collaboration Suite to the latest patched version and ensure all security updates are applied regularly.