CVE-2021-27103: Accellion FTA Server-Side Request Forgery (SSRF)
Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability. Accellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html.
- CISA KEV-listed (remediation due 2021-11-17)
- used in ransomware campaigns
- EPSS 1.1% (78.5% percentile)