- Vendor / Project
- Accellion
- Product
- FTA
- Date added
- Nov 3, 2021
- Due date
- Nov 17, 2021
- Known ransomware use
- Known
- CWEs
- CWE-20, CWE-78
Description
Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.
Required action
Apply updates per vendor instructions.