Skip to content
OpenAdvisories
Medium WID-SEC-2023-3064 1 CVE

SolarWinds Serv-U Managed File Transfer Server: Schwachstelle ermöglicht Codeausführung

Published Dec 5, 2023 · Updated Dec 5, 2023 · de-DE

Vendor: SolarWinds Product: Serv-U Managed File Transfer Server < 15.4.1 Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in SolarWinds Serv-U Managed File Transfer Server ausnutzen, um beliebigen Programmcode auszuführen.

Product

SolarWinds Serv-U ist eine FTP-Server Software.

Vulnerabilities 1

  • Medium 5.0
    CVE-2023-40053

    HTML injection Vulnerability in Serv-U 15.4

    A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously.

    SolarWinds Serv-U

Revision history

  1. #1

    Initiale Fassung

References