Accellion FTA OS Command Injection Vulnerability

概要

参考情報

• accellion/CVEs · Broken Link
• accellion.com/products/fta · Product
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2021-27102

fta のその他の脆弱性

• CVE-2021-27730緊急 9.8Accellion FTA 9_12_432 and earlier is affected by argument injection via a crafted POST request to an admin endpoint. The fixed version is F…
• CVE-2021-27731中 6.1Accellion FTA 9_12_432 and earlier is affected by stored XSS via a crafted POST request to a user endpoint. The fixed version is FTA_9_12_44…
• CVE-2021-27104緊急 9.8悪用確認済み（CISA KEV）Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed vers…
• CVE-2021-27103緊急 9.8悪用確認済み（CISA KEV）Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed version is FTA_9_12_416 …
• CVE-2021-27101緊急 9.8悪用確認済み（CISA KEV）Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. The fixed vers…