← Database

CVE-2022-48362

HIGH CVSS: 8.8 Published: 2023-02-25 Modified: 2026-06-17

Description

Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central is restarted. (The attacker could authenticate by exploiting CVE-2021-44515.)

Affected Platforms

Zohocorp Manageengine Desktop Central

Weakness Type

CWE-22, CWE-22

References