HTML injection Vulnerability in Serv-U 15.4

CVE-2023-40053

4.6MEDIUM

Key Information

Vendor: SolarWinds
Status: Serv-U
Vendor: CVE Published:; 6 December 2023

Summary

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously.

Affected Version(s)

Serv-U = 15.4 and previous versions

CVSS V3.1

Score:

4.6

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published.
Dec 6, 2023
Vulnerability Reserved.
Aug 8, 2023

Collectors

NVD DatabaseMitre Database

Credit

Igor Souza