← All advisories

High severity8.3NVD Advisory· Published Dec 6, 2021· Updated Jun 17, 2026

CVE-2021-35242

CVE-2021-35242

Description

Serv-U server responds with valid CSRFToken when the request contains only Session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

SolarWinds/Serv-U MFTllm-fuzzy
SolarWinds/Serv U File Servercpe-rescue
Range: 15.2.4 Hotfix 1 and previous versions

Patches

Vulnerability mechanics

References

2

documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-5_release_notes.htmnvdRelease NotesVendor Advisory
www.solarwinds.com/trust-center/security-advisories/cve-2021-35242nvdBroken Link

News mentions

0

No linked articles in our index yet.