Vulnerability Details CVE-2017-8304
An issue was discovered on Accellion FTA devices before FTA_9_12_180. courier/1000@/oauth/playground/callback.html allows XSS with a crafted URI.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.2%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2017-8304
-
cpe:2.3:a:accellion:file_transfer_appliance:8_0_540
-
cpe:2.3:a:accellion:file_transfer_appliance:9_11_200
-
cpe:2.3:a:accellion:file_transfer_appliance:9_11_210