cve/2021/CVE-2021-20080.md
2024-06-18 02:51:15 +02:00

937 B

CVE-2021-20080

Description

Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks by uploading a crafted XML asset file.

POC

Reference

Github