Description
Serv-U server responds with valid CSRFToken when the request contains only Session.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SolarWinds | Serv-U Server | 15.2.4 Hotfix 1 and previous versions – < 15.2.5 | 15.2.5 |
High · 8.3
CVE-2021-35242
EUVD-2021-21885GHSA-vrh8-5phj-x6h2
A valid CSRF token is present in response to an invalid request
Published Dec 6, 2021 · Updated Aug 4, 2024 · Assigned by SolarWinds