CVE-2017-8788: CRLF Injection
Published May 5, 2017
·Updated
An issue was discovered on Accellion FTA devices before FTA912180. There is a CRLF vulnerability in settingsglobaltextedit.php allowing ?display=x%0Dnewline attacks.
Affected Software
1 affected component
Accellion File Transfer Appliance<=9_12_40
Event History
May 5, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-8788?
CVE-2017-8788 is classified as a medium severity vulnerability.
2
How do I fix CVE-2017-8788?
To fix CVE-2017-8788, update the Accellion FTA devices to version FTA_9_12_180 or later.
3
What systems are affected by CVE-2017-8788?
CVE-2017-8788 affects Accellion FTA devices prior to version FTA_9_12_180.
4
What type of vulnerability is CVE-2017-8788?
CVE-2017-8788 is a CRLF vulnerability found in the settings_global_text_edit.php file.
5
What kind of attack can CVE-2017-8788 facilitate?
CVE-2017-8788 can facilitate newline injection attacks due to the CRLF vulnerability.