Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search.

Published Jun 23, 2021 · Updated Aug 3, 2024 · Assigned by mitre