ZOHO ManageEngine ServiceDesk /download-file 路径存在敏感信息泄露

2023-03-27 Gin PoC No

Description

The download-file file of ServiceDesk Plus v10<10509 has a sensitive information leakage vulnerability, which can bypass authentication and download sensitive information without authorization.

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities