Description (CNA)
SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input field to prevent the misuse of this input in the future.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SolarWinds / WebHelpDesk | affected 12.7.8 and previous versions before 12.7.8 HF 1 |
CWE
CWE-20
References
- https://support.solarwinds.com/SuccessCenter/s/article/Web-Help-Desk-12-7-8-Hotfix-1-Release-Notes?language=en_US
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35254
ADP enrichment
No English description supplied.