{"uuid": "ff58e987-0e37-4664-8e51-4c2d3dd1bbd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68645", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/478", "content": "CVE-2025-68645\n\nA Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory.", "creation_timestamp": "2026-08-28T00:00:38.670973Z"}