- Vendor / Project
- Accellion
- Product
- FTA
- Date added
- Nov 3, 2021
- Due date
- Nov 17, 2021
- Known ransomware use
- Known
- CWEs
- CWE-89, CWE-138
Description
Accellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html.
Required action
Apply updates per vendor instructions.