Crlf injection

2017-05-0518:29:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

JSON

An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is a CRLF vulnerability in settings_global_text_edit.php allowing ?display=x%0Dnewline attacks.

CPENameOperatorVersion
file_transfer_applianceeq<= 91240

CPE	Name	Operator	Version
	file_transfer_appliance	eq	<= 91240

References

gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb