Description
Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request.
Unscored
CVE-2020-10859
EUVD-2020-3265GHSA-3mcx-mwcf-7jc7
Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Tr…
Published May 5, 2020 · Updated Aug 4, 2024 · Assigned by mitre