A new security patch has been released to further address CVE-2022-27924.
This issue has been ranked as High by the Zimbra Team and we recommend that you use the most recent release available to avoid any issues.
https://blog.zimbra.com/2022/05/new-zimbra-security-patches-9-0-0-patch-24-1-and-8-8-15-patch-31-1/ (May 10th 2022)

Zimbra connect - profile picture

Interested in talking about Mash-up's? This is the place.
ernestlp91
Posts: 3
Joined: Thu Feb 24, 2022 5:01 am

Zimbra connect - profile picture

Postby ernestlp91 » Thu Feb 24, 2022 5:12 am

In zimbra connect when I try to change my profile picture the uploadpicture function fails and the file is not sent to the server, so the image is not updated


User avatar
jholder
Zimbra Employee
Zimbra Employee
Posts: 4824
Joined: Fri Sep 12, 2014 10:00 pm

Re: Zimbra connect - profile picture

Postby jholder » Thu Feb 24, 2022 5:20 am

If it fails, there will be an error with a reason in /opt/zimbra/log/mailbox.log
ernestlp91
Posts: 3
Joined: Thu Feb 24, 2022 5:01 am

Re: Zimbra connect - profile picture

Postby ernestlp91 » Sat Feb 26, 2022 3:49 am

In mailbox.log nothing comes out, because the request returns 200 OK.
This is the request:

POST https://****************/zx/team/v15/uploadUserPicture

Headers:
Host: *****************
User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0
Accept: */*
Accept-Language: es-ES,es;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate, br
Content-Type: image/png
Content-Length: 4645
Origin: https://********************
Connection: keep-alive
Referer: https://********************/?client=advanced
Cookie: ZM_TEST=true; ZM_AUTH_TOKEN = [removed]; JSESSIONID=node01cw6ufgm6z7qk18cvzjouvfnwq0.node0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

And the request body is empty.

Before updating the photo, the avatar consists of two of my initials on a red background, after updating the photo only the previous background is shown.
User avatar
jholder
Zimbra Employee
Zimbra Employee
Posts: 4824
Joined: Fri Sep 12, 2014 10:00 pm

Re: Zimbra connect - profile picture

Postby jholder » Sat Feb 26, 2022 3:59 am

Oh this is a zxextras component. I would head over to their forums, they'll be able to help.
Also I've removed your auth token from your post. if you post that, people can login as you without a password.

Return to “Zimlets”

Who is online

Users browsing this forum: No registered users and 4 guests