CVE-2020-10859

Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted…

published May 5, 2020

CVSS
—
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04386 · 91.3th percentile
Published
2020-05-05T20:16Z
EPSS history
Timeline
  • 05 MAY 20:16Z
    Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted…
    cvelistv5