ZOHO ManageEngine Log360 Code Injection Vulnerability

ZOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity and comply with regulatory requirements.A code injection vulnerability exists in ZOHO ManageEngine Log360, which originated in Zoho ManageEngine Log360 before Prior to Build 5219, an attacker could exploit this vulnerability to conduct CSRF attacks on proxy settings.