Zoho ManageEngine ADSelfService Plus Server-Side Request Forgery Vulnerability

ZOHO ManageEngine ADSelfService Plus is a Web-based end-user password management software from ZOHO. A server-side request forgery vulnerability exists in ZOHO ManageEngine ADSelfService Plus versions prior to 5.x build 5703, which can be exploited by an attacker to perform a server-side request...

CVE-2019-3905

Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF...

CVE-2019-3905

Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF...

PT-2019-16760 · Zoho Manageengine · Adselfservice Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADSelfService Plus versions 5.x before build 5703 Description: The issue is related to a Server-Side Request Forgery SSRF in Zoho ManageEngine ADSelfService Plus. Recommendations: For versions 5.x before build 5703, update t...