CVE-2020-22428 | BDVDB-2026-153104 Detail

Description#

SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.linkedin.com/in/gabrielegristina
https://twitter.com/gm4tr1x
https://github.com/matrix
https://support.solarwinds.com/SuccessCenter/s/article/Serv-U-15-1-6-Hotfix-3?language=en_US

Exploit#

No public exploit known

History#

Version 12021-05-05Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.