CISA Warns: SysAid Flaws Under Active Attack Enable Remote File Access and SSRF

The U.S. Cybersecurity and Infrastructure Security Agency added two security flaws impacting SysAid IT support software to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerabilities in question are listed below.