PT-2018-5090
CVE-2016-9500
·
تاريخ النشر
2018-07-13
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Accellion FTP server versions prior to FTA 9 12 220
Description
The issue concerns the use of the Accusoft Prizm Content flash component in the Accellion FTP server, which contains multiple parameters, such as
customTabCategoryName and customButton1Image, that are vulnerable to cross-site scripting.Recommendations
For Accellion FTP server versions prior to FTA 9 12 220, update to version FTA 9 12 220 or later to resolve the issue. As a temporary workaround, consider restricting access to the parameters
customTabCategoryName and customButton1Image to minimize the risk of exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾