PT-2017-16421
CVE-2017-5247
·
تاريخ النشر
2017-07-18
·
تاريخ التحديث
2020-02-20
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Biscom Secure File Transfer versions prior to 5.1.1028
Description
The issue allows an authenticated user with upload or send file permissions to inject standard HTML scripting tags into the File Name field, which will be evaluated by other authenticated users viewing the file name.
Recommendations
For versions prior to 5.1.1028, update to version 5.1.1028 to resolve the issue. As a temporary workaround, consider restricting access to file uploads and sends to trusted users only until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾