SolarWinds Serv-U FTP Server 15.2.1 Path Traversal

Posted on 12 February 2021

SolarWinds Serv-U File Server versions through 15.2.1 do not correctly validate path information, allowing the disclosure of files and directories outside of the user's home directory via a specially crafted GET request.