EUVD-2017-14351

Malware in sbrugna...

CVE-2017-5246

Biscom Secure File Transfer is vulnerable to AngularJS expression injection in the Display Name field. An authenticated user can populate this field with a valid AngularJS expression, wrapped in double curly-braces . This expression will be evaluated by any other authenticated user who views the...

CVE-2017-5246: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Biscom Secure File Transfer is vulnerable to AngularJS expression injection in the Display Name field. An authenticated user can populate this field with a valid AngularJS expression, wrapped in double curly-braces . This expression will be evaluated by any other authenticated user who views the...

PT-2017-16420

Name of the Vulnerable Software and Affected Versions Biscom Secure File Transfer versions 5.0.0000 through 5.1.1026 Description The issue concerns AngularJS expression injection in the Display Name field. An authenticated user can populate this field with a valid AngularJS expression, wrapped in...