CVE-2023-49332

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares...

CVE-2023-49332

Zoho ManageEngine ADAudit Plus versions below 7271 are vulnerable to SQL injection when adding file shares. The root cause is an injection flaw in the file share addition workflow, enabling high-privilege impact (C/H/I/H with NETWORK attack surface per the CVE metrics). Red Hat and CVE databases ...