A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously.
https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-40053