Security services, software licences and managed support from one accountable partner.

NAPSECURE
Under attack? Talk to an expert
← All vulnerabilities

Not yet scored Actively exploited Used in ransomware

CVE-2021-27103

Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability

Description

Accellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 17 Nov 2021.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.