CVE-2017-5241

State: Published
Severity: Not scored
Published: Jun 28, 2017
Updated: Aug 5, 2024
Reserved: Jan 9, 2017

Description

Biscom Secure File Transfer versions 5.0.0.0 trough 5.1.1024 are vulnerable to post-authentication persistent cross-site scripting (XSS) in the "Name" and "Description" fields of a Workspace, as well as the "Description" field of a File Details pane of a file stored in a Workspace. This issue has been resolved in version 5.1.1025.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Secure File TransferBiscom	5.0.0.0 trough 5.1.1024Affected

References

99341vdb-entry
https://community.rapid7.com/community/infosec/blog/2017/06/27/r7-2017-06-biscom-sftp-xss-cve-2017-5241
https://cve.biscom.com/bis-sft-cv-003/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.