Security Advisory

CVE-2017-17552

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-02-07 17:00:00
Last updated 2024-08-05 20:51:32
Assigner mitre
State PUBLISHED

Description

/LoadFrame in Zoho ManageEngine AD Manager Plus build 6590 - 6613 allows attackers to conduct URL Redirection attacks via the src parameter, resulting in a bypass of CSRF protection, or potentially masquerading a malicious URL as trusted.