| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine servicedesk plus | ≤ 10.5 |
In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its number to the SDNotify.do?notifyModule=Solution&mode=E-Mail¬ifyTo=SOLFORWARD&id= substring.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free