CVE-2017-5247

Name of the Vulnerable Software and Affected Versions Biscom Secure File Transfer versions prior to 5.1.1028

Description The issue allows an authenticated user with upload or send file permissions to inject standard HTML scripting tags into the File Name field, which will be evaluated by other authenticated users viewing the file name.

Recommendations For versions prior to 5.1.1028, update to version 5.1.1028 to resolve the issue. As a temporary workaround, consider restricting access to file uploads and sends to trusted users only until the update is applied.