CVE-2021-25179

Description

SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting (XSS) via the HTTP Host header.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://www.linkedin.com/in/gabrielegristina ↗
• https://twitter.com/gm4tr1x ↗
• https://github.com/matrix ↗
• https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2_release_notes.htm ↗