SolarWinds Serv-U File Server versions through 15.2.1 do not correctly validate path information, allowing the disclosure of files and directories outside of the user's home directory via a specially crafted GET request.
64b515c78c524df69e596a9ac43e62c6feeaae73ff31f506f5da5c63c7573d1a