Session fixation

2021-03-1917:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

44.8%

FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component.

CPENameOperatorVersion
ftapige4.0
ftapile4.10

CPE	Name	Operator	Version
	ftapi	ge	4.0
	ftapi	le	4.10

References

github.com/rauschecker/CVEs/tree/main/CVE-2021-25277

www.ftapi.com/release-notes/

0.001 Low

EPSS

Percentile

44.8%

Related for PRION:CVE-2021-25277