cve/2020/CVE-2020-9346.md
2024-05-25 21:48:12 +02:00

622 B

CVE-2020-9346

Description

Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery (CSRF) attacks, as demonstrated by changing a user's role.

POC

Reference

No PoCs from references.

Github