← Volver a CVEs
CVE-2017-8304
N/ADescripcion
An issue was discovered on Accellion FTA devices before FTA_9_12_180. courier/1000@/oauth/playground/callback.html allows XSS with a crafted URI.
Detalles CVE
Puntuacion CVSS v3.1N/A
Publicado5/5/2017
Ultima modificacion4/20/2025
Fuentenvd
Avistamientos honeypot0
Productos afectados
accellion:file_transfer_appliance
Debilidades (CWE)
CWE-79
Referencias
https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.