| Package | Affected versions | Patched versions |
|---|---|---|
| serv-u managed file transfer | = 15.1.6≤ 15.1.5 |
SolarWinds Serv-U Managed File Transfer (MFT) Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free