Design/Logic Flaw

2017-05-0518:29:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.0%

An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in home/seos/courier/user_add.html with the param parameter.

CPENameOperatorVersion
file_transfer_applianceeq<= 91240

CPE	Name	Operator	Version
	file_transfer_appliance	eq	<= 91240

References

gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb