SolarWinds Serv-U FTP Server 15.2.1 Path Traversal
Posted by deepcore on February 13, 2021 – 11:36 am
SolarWinds Serv-U File Server versions through 15.2.1 do not correctly validate path information, allowing the disclosure of files and directories outside of the user’s home directory via a specially crafted GET request.
Post a reply
You must be logged in to post a comment.