CVE-2017-8760
05.05.2017, 18:29
An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in courier/1000@/index.html with the auth_params parameter. The device tries to use internal WAF filters to stop specific XSS Vulnerabilities. However, these can be bypassed by using some modifications to the payloads, e.g., URL encoding.
| Vendor | Product | Version |
|---|---|---|
| accellion | file_transfer_appliance | 𝑥 ≤ 9_12_40 |
𝑥
= Vulnerable software versions