pentester.land· Jul 6, 2021· by Victor Kahan🔍 CVE-2021-32604

Solarwinds Serv-U 15.2.3 Share URL XSS (CVE-2021-32604)

Target Program: SolarWinds

🎯 Vulnerability: Cross-Site Scripting (XSS)

💡 Defense Fix: Enforce Context-Aware Output Encoding, strict Content-Security-Policy (CSP), and HttpOnly cookie flags.

#XSS#CVE-2021-32604