SolarWinds Serv-U Client-Side Cross-Site Scripting Vulnerability

A client-side cross-site scripting (XSS) vulnerability has been identified in SolarWinds Serv-U. This issue can only be exploited by an authenticated user, on the local machine, and through the local browser session, which significantly lowers the risk. The vulnerability is present in Serv-U versions prior to 15.5.1.104.

Impact

Exploitation of this vulnerability allows for client-side cross-site scripting, where an attacker could inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users can upgrade to Serv-U version 15.5.1.104 to address this vulnerability. Instructions for upgrading are available in the SolarWinds Serv-U File Server Administrator Guide.