Enhancement: vulnerabilities/other/zimbra-preauth-ssrf.yaml by mp

vulnerabilities/other/zimbra-preauth-ssrf.yaml

@@ -1,12 +1,18 @@
 id: zimbra-preauth-ssrf
 
 info:
-  name: Zimbra Collaboration Suite (ZCS) - SSRF
+  name: Zimbra Collaboration Suite - Server-Side Request Forgery
   author: gy741
-  severity: critical
+  severity: medium
-  description: A vulnerability in Zimbra Collaboration Suite allows remote unauthenticated attackers to cause the product to include content returned by third-party servers and use it as its own code.
+  description:  Zimbra Collaboration Suite (ZCS) allows remote unauthenticated attackers to cause the product to include content returned by third-party servers and use it as its own code.
   reference:
     - https://www.adminxe.com/2183.html
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-7796
+  classification:
+    cvss-metrics: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
+    cvss-score: 6.8
+    cve-id: CVE-2020-7796
+    cwe-id: CWE-918
   tags: zimbra,ssrf,oast
 
 requests:
@@ -21,3 +27,5 @@ requests:
         part: interactsh_protocol # Confirms the HTTP Interaction
         words:
           - "http"
+
+# Enhanced by mp on 2022/06/03