Workaround
upgrade Zoho ManageEngine ServiceDesk Plus (SDP) above 10.0 build 10012
Published Date:Oct 1, 2020
Updated Date:Oct 1, 2020
Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization.