Description
Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable to cross-site scripting.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Accellion | FTP Server | FTA_9_12_220 – < FTA_9_12_220 | FTA_9_12_220 |
References
- https://www.qualys.com/2016/12/06/qsa-2016-12-06/qsa-2016-12-06.pdf
- 96154 vdb-entry
- VU#745607 third-party-advisory