ZOHO ManageEngine SupportCenter Plus server-side request forgery vulnerability

ZOHO ManageEngine SupportCenter Plus is a web-based customer support software from ZOHO, Inc. Used to allow organizations to effectively manage customer requests, their account and contact information, and service contracts, and in the process provide a superior customer experience, ZOHO ManageEngine SupportCenter Plus is vulnerable to a server-side request forgery vulnerability that stems from the product’s ActionExecutor module not effectively authenticating the user’s identity. An attacker could use this vulnerability to obtain sensitive data.