CVE-2021-31531: SSRF
Published Jun 29, 2021
·Updated
Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery (SSRF).
Affected Software
23 affected components
ZohoCorp ManageEngine ServiceDesk Plus MSP<10.5
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10500
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10501
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10502
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10503
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10504
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10505
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10506
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10507
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10508
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10509
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10510
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10511
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10512
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10513
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10514
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10515
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10516
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10517
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10518
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10519
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10520
Event History
Jun 29, 2021
CVE Published
via MITRE·01:13 PM
Data Sourced
via MITRE·01:13 PM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2021-31531.
2
What software is affected by this vulnerability?
Zoho ManageEngine ServiceDesk Plus MSP versions before 10521 are affected.
3
What is the severity of CVE-2021-31531?
The severity of CVE-2021-31531 is critical, with a CVSS score of 9.8.
4
What is the description of CVE-2021-31531?
CVE-2021-31531 is a vulnerability in Zoho ManageEngine ServiceDesk Plus MSP that allows Server-Side Request Forgery (SSRF) attacks.
5
How do I fix CVE-2021-31531?
To fix CVE-2021-31531, you need to update Zoho ManageEngine ServiceDesk Plus MSP to version 10521 or later.