Lucene search
PRIOn knowledge basePRION:CVE-2017-8794HistoryMay 05, 2017 - 6:29 p.m.
Server side request forgery (ssrf)
2017-05-0518:29:00
PRIOn knowledge base
www.prio-n.com
1
An issue was discovered on Accellion FTA devices before FTA_9_12_180. Because a regular expression (intended to match local https URLs) lacks an initial ^ character, courier/web/1000@/wmProgressval.html allows SSRF attacks with a file:///etc/passwd#https:// URL pattern.
| CPE | Name | Operator | Version |
|---|---|---|---|
| file_transfer_appliance | eq | <= 91240 |
Related
cvelist
cvelist
CVE-2017-8794
2017-05-05 18:00:00
cve
cve
CVE-2017-8794
2017-05-05 18:29:00
nvd
nvd
CVE-2017-8794
2017-05-05 18:29:00