ZSA-2025-03

Date: 2025-02-12
Affected: All versions of Znuny LTS from 6.5.1 up to including 6.5.11. All versions of Znuny from 7.0.1 up to including 7.1.3. All versions of Znuny LTS 6.0.
Severity: low
CVE: CVE-2025-26845

Attackers with local write access to the configuration might be able to elevate their privileges if the backup script is executed with the root or any other privileged account.

Thank you to Diego Tellaroli for reporting this.