Skip to content
OpenAdvisories
High · 8.2 CVE-2021-35254 EUVD-2021-21897GHSA-xpr2-v3gx-4h93

Authenticated Remote Code Execution in WebHelpDesk 12.7.8

Published Mar 25, 2022 · Updated Aug 4, 2024 · Assigned by SolarWinds

Description

SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input field to prevent the misuse of this input in the future.

Affected products

VendorProductAffectedFixed
SolarWinds WebHelpDesk 12.7.8 and previous versions – < 12.7.8 HF 1 12.7.8 HF 1

References