CVE-2021-31586

Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search...

CVE-2021-31586

Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search...

CVE-2021-31586

Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search...

Sql injection

Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search...

CVE-2021-31586

Summary: Accellion Kiteworks affected versions prior to 7.4.0 have a SQL Injection vulnerability exposed through LDAPGroup Search. An authenticated user can trigger the flaw, potentially exposing sensitive database information. Affected product: Accellion Kiteworks (before 7.4.0). Vulnerability d...

CVE-2021-31586

Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search...

CVE-2021-31586: Improper Neutralization of Special Elements used in an SQL Command

Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search...

PT-2021-19434

Name of the Vulnerable Software and Affected Versions Accellion Kiteworks versions prior to 7.4.0 Description The issue allows an authenticated user to perform SQL Injection via the LDAPGroup Search. Recommendations For versions prior to 7.4.0, update to version 7.4.0 or later to resolve the issu...