Lucene search
PRIOn knowledge basePRION:CVE-2017-8793HistoryMay 05, 2017 - 6:29 p.m.
Design/Logic Flaw
2017-05-0518:29:00
PRIOn knowledge base
www.prio-n.com
4
An issue was discovered on Accellion FTA devices before FTA_9_12_180. By sending a POST request to home/seos/courier/web/wmProgressstat.html.php with an attacker domain in the acallow parameter, the device will respond with an Access-Control-Allow-Origin header allowing the attacker to have site access with a bypass of the Same Origin Policy.
| CPE | Name | Operator | Version |
|---|---|---|---|
| file_transfer_appliance | eq | <= 91240 |
Related
cvelist
cvelist
CVE-2017-8793
2017-05-05 18:00:00
nvd
nvd
CVE-2017-8793
2017-05-05 18:29:00
cve
cve
CVE-2017-8793
2017-05-05 18:29:00