CVE-2019-12769

Publication date

2020-03-18 17:38:10

Family

mitre

State

PUBLISHED

Description

SolarWinds Serv-U Managed File Transfer (MFT) Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters.