Authenticated code execution via unrestricted JSP upload

Unrestricted file upload in Zoho Corporation ADManager Plus Build 7111 and earlier allows remote authenticated users to execute code. The PasswordExpiryNotification REST handler accepts a JSP filename and body, writes the file beneath a web-served directory, and permits retrieval that executes the uploaded JSP. A valid low-privilege account and network access to the web interface are required; successful exploitation runs attacker-controlled code on the Windows host and can expose stored domain credentials.