CVE-2021-31586

June 25, 2021

Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search.

Summary:

Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search.

Reference Links(if available):

  • https://github.com/accellion/CVEs
  • https://github.com/accellion/CVEs/blob/main/CVE-2021-31586.txt

  • CVSS Score (if available)

    v2: / MEDIUM

    v3: /

    Links to Exploits(if available)

  • You may have missed

    image

    [LOCKBIT3] – Ransomware Victim: madison-home[.]com

    November 22, 2024
    image

    [CHORT] – Ransomware Victim: sheboyganwi[.]gov

    November 22, 2024
    image

    [QILIN] – Ransomware Victim: Zimmerman & Frachtman PA Law Firm

    November 22, 2024
    image

    [QILIN] – Ransomware Victim: Calvert Home Mortgage Investment

    November 22, 2024
    image

    [QILIN] – Ransomware Victim: LBCO Contracting LTD

    November 22, 2024