NetSight
IP …
medium6.5

CVE-2020-10859

Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted…

Impact

Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request.

Affected products

VendorProductAffected versions
ZohocorpManageengine Desktop Central
before 10.0.484

Weakness classification

CWE-22

References