CVE-2021-31586

Description

Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/accellion/CVEs ↗
• https://github.com/accellion/CVEs/blob/main/CVE-2021-31586.txt ↗