CVE-2023-40053

creationtimestamp| type| source ---|---|--- 2023-12-24 17:21:13+00:00| seen| https://t.me/ctinow/159061...

CVE-2023-40053 HTML injection Vulnerability in Serv-U 15.4

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously...

CVE-2023-40053

The affected product is SolarWinds Serv-U 15.4. A vulnerability in the file share function allows an authenticated actor to insert content, potentially enabling malicious use. CVSS v3.1 base score 5.0 (Medium) with network access, low attack complexity, low privileges required, and changed scope....

SolarWinds Serv-U 15.4 < 15.4.1

The version of SolarWinds Serv-U installed on the remote host is prior to 15.4.1. It is, therefore, affected by a vulnerability as referenced in the serv-u1541 advisory. - A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share...