CVE-2021-27103
KEV · RansomwareAccellion FTA Server-Side Request Forgery (SSRF) Vulnerability
View CVE record →- Vendor / Project
- Accellion
- Product
- FTA
- Date added
- Nov 3, 2021
- Due date
- Nov 17, 2021
- Known ransomware use
- Known
- CWEs
- CWE-918
Description
Accellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html.
Required action
Apply updates per vendor instructions.