CVE

CVE-2021-27103

P1⬤ KNOWN RANSOMWARE USE

Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability

Accellion · FTA

Date added (CISA)

2021-11-03

Remediation due

2021-11-17

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

Accellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html.