EUVD-2020-7581

Malware in sbrugna...

CVE-2020-15594

CVE-2020-15594 affects Zoho Application Control Plus prior to version 10.0.511. The mail gateway configuration feature exposes a Server-Side Request Forgery (SSRF) flaw that enables an attacker to scan for open ports and discover reachable machines on the same network segment. The issue is mitiga...

CVE-2020-15594: Server-Side Request Forgery (SSRF)

An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration feature allows an attacker to perform a scan in order to discover open ports on a machine as well as available machines on the network segment on which the instance of the product...