critical9.8Known exploited
CVE-2021-27103
Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2021-11-17.
Apply updates per vendor instructions.
Impact
Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed version is FTA_9_12_416 and later.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Accellion | Fta | before 9_12_416 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- https://github.com/accellion/CVEs/blob/main/CVE-2021-27103.txt
- https://www.accellion.com/products/fta/
- https://github.com/accellion/CVEs/blob/main/CVE-2021-27103.txt
- https://www.accellion.com/products/fta/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27103