writeups.xyz / CVE-2022-28219: Unauthenticated XXE to RCE and Domain Compromise in ManageEngine ADAudit Plus

Submitter : c2a

Date: 29 June 2022

Bounty : undisclosed

Vulnerabilities :

• XXE
• SSRF
• RCE

Programs :

• Zoho

Authors :

• Naveen Sunkavally

Link :
https://www.horizon3.ai/red-team-blog-cve-2022-28219/