VYPR

Flickr Zimlet

by Zimbra

CVEs (1)

  • CVE-2025-67809MedDec 15, 2025
    risk 0.31cvss 4.7epss 0.00

    An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A hardcoded Flickr API key and secret are present in the publicly accessible Flickr Zimlet used by Zimbra Collaboration. Because these credentials are embedded directly in the Zimlet, any unauthorized party…