An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.x before 9.0.0 Patch 16. The value of the X-Host header overwrites the value of the Host header in proxied requests. The value of X-Host header is not checked against the whitelist of hosts Zimbra is allowed to proxy to (the zimbraProxyAllowedDomains setting).
| Software | From | Fixed in |
|---|---|---|
| zimbra / collaboration | 9.0.0 | 9.0.0.x |
| zimbra / collaboration | 9.0.0-p2 | 9.0.0-p2.x |
| zimbra / collaboration | 9.0.0-p3 | 9.0.0-p3.x |
| zimbra / collaboration | 9.0.0-p4 | 9.0.0-p4.x |
| zimbra / collaboration | 9.0.0-p5 | 9.0.0-p5.x |
| zimbra / collaboration | 9.0.0-p6 | 9.0.0-p6.x |
| zimbra / collaboration | 9.0.0-p7 | 9.0.0-p7.x |
| zimbra / collaboration | 9.0.0-p8 | 9.0.0-p8.x |
| zimbra / collaboration | 9.0.0-p9 | 9.0.0-p9.x |
| zimbra / collaboration | 9.0.0-p1 | 9.0.0-p1.x |
| zimbra / collaboration | 8.8.15-p10 | 8.8.15-p10.x |
| zimbra / collaboration | 8.8.15-p11 | 8.8.15-p11.x |
| zimbra / collaboration | 8.8.15-p16 | 8.8.15-p16.x |
| zimbra / collaboration | 8.8.15-p15 | 8.8.15-p15.x |
| zimbra / collaboration | 8.8.15-p14 | 8.8.15-p14.x |
| zimbra / collaboration | 8.8.15-p13 | 8.8.15-p13.x |
| zimbra / collaboration | 8.8.15-p12 | 8.8.15-p12.x |
| zimbra / collaboration | 8.8.15-p1 | 8.8.15-p1.x |
| zimbra / collaboration | 8.8.15-p2 | 8.8.15-p2.x |
| zimbra / collaboration | 8.8.15-p3 | 8.8.15-p3.x |
| zimbra / collaboration | 8.8.15-p4 | 8.8.15-p4.x |
| zimbra / collaboration | 8.8.15-p5 | 8.8.15-p5.x |
| zimbra / collaboration | 8.8.15-p6 | 8.8.15-p6.x |
| zimbra / collaboration | 8.8.15-p7 | 8.8.15-p7.x |
| zimbra / collaboration | 8.8.15-p8 | 8.8.15-p8.x |
| zimbra / collaboration | 8.8.15-p9 | 8.8.15-p9.x |
| zimbra / collaboration | 8.8.15 | 8.8.15.x |
| zimbra / collaboration | 8.8.15-p17 | 8.8.15-p17.x |
| zimbra / collaboration | 8.8.15-p18 | 8.8.15-p18.x |
| zimbra / collaboration | 8.8.15-p19 | 8.8.15-p19.x |
| zimbra / collaboration | 9.0.0-p10 | 9.0.0-p10.x |
| zimbra / collaboration | 9.0.0-p11 | 9.0.0-p11.x |
| zimbra / collaboration | 9.0.0-p12 | 9.0.0-p12.x |
| zimbra / collaboration | 8.8 | 8.8.15 |