Accellion 4

Organization

CVE-2021-27103: Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability

Accellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html.

Accellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html.

Accellion FTA contains an OS command injection vulnerability exploited via a local web service call.

Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.