PT-2021-19802
CVE-2021-32604
·
Published
2021-05-11
·
Updated
2022-05-13
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SolarWinds Serv-U versions prior to 15.2.3
Description
The issue concerns the mishandling of the user-supplied
SenderEmail parameter in the Share/IncomingWizard.htm page, leading to a potential security issue.Recommendations
For versions prior to 15.2.3, update to version 15.2.3 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾