CVE-2017-8793

An issue was discovered on Accellion FTA devices before FTA_9_12_180. By sending a POST request to home/seos/courier/web/wmProgressstat.html.php with an attacker domain in the acallow parameter, the device will respond with an Access-Control-Allow-Origin header allowing the attacker to have site access with a bypass of the Same Origin Policy.
References
Link Resource
https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-05-05 18:29

Updated : 2023-12-10 12:01


NVD link : CVE-2017-8793

Mitre link : CVE-2017-8793

CVE.ORG link : CVE-2017-8793


JSON object : View

Products Affected

accellion

  • file_transfer_appliance
CWE
CWE-346

Origin Validation Error