CVE-2021-35242

HIGH CVSS: 8.3 Published: 2021-12-06 Modified: 2026-06-17

Description

Serv-U server responds with valid CSRFToken when the request contains only Session.

Affected Platforms

Solarwinds Serv-U

Weakness Type

CWE-352, CWE-352

References