A critical unauthenticated SQL injection vulnerability has been discovered in Zoho Analytics Plus on-premise, posing a severe risk to organizations running affected versions. Tracked as CVE-2025-8324, this flaw enables attackers to execute arbitrary SQL queries without authentication, potentially leading to unauthorized data exposure and account takeovers. CVE ID Product Severity Affected Versions Fixed Version CVE-2025-8324 […]

The post Critical Zoho Analytics Plus Flaw Allows Attackers to Run Arbitrary SQL Queries appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

Source: gbHackers
Source Link: https://gbhackers.com/critical-zoho-analytics-plus-flaw/