writeups.xyz / Pwning ManageEngine — From Endpoint to Exploit: A deep dive into CVE-2021–42847

Submitter : c2a

Date: 12 October 2022

Bounty : undisclosed

Vulnerabilities :

• Arbitrary File Write
• XXE
• RCE

Programs :

• Zoho

Authors :

• Erik Wynter (@WynterErik)

Link :
https://medium.com/@erik.wynter/pwning-manageengine-from-endpoint-to-exploit-bc5793836fd