CVE-2021-31586

Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search...

CVE-2021-31586

Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search...

CVE-2021-31586

Summary: Accellion Kiteworks affected versions prior to 7.4.0 have a SQL Injection vulnerability exposed through LDAPGroup Search. An authenticated user can trigger the flaw, potentially exposing sensitive database information. Affected product: Accellion Kiteworks (before 7.4.0). Vulnerability d...