CVE-2017-8760

N/A

Descricao

An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in courier/1000@/index.html with the auth_params parameter. The device tries to use internal WAF filters to stop specific XSS Vulnerabilities. However, these can be bypassed by using some modifications to the payloads, e.g., URL encoding.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado5/5/2017

Ultima modificacao4/20/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

accellion:file_transfer_appliance

Fraquezas (CWE)

CWE-79

Referencias

https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb(cve@mitre.org)

https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.