Skip to content
OpenAdvisories
Medium · 5.0 CVE-2023-40053 EUVD-2023-44660GHSA-7m83-852c-hhv7

HTML injection Vulnerability in Serv-U 15.4

Published Dec 6, 2023 · Updated Aug 2, 2024 · Assigned by SolarWinds

Description

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously.

Affected products

VendorProductAffectedFixed
SolarWinds Serv-U 15.4 and previous versions —

Advisories 1

References