Zimbra developers released security updates to address a vulnerability that could lead to server-side request forgery (SSRF). This issue affects Zimbra Daffodil prior to 10.1.12. This vulnerability has been fixed in Zimbra Daffodil 10.1.12.

Source: zimbra.com