CVE-2021-27104

Description

Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.

References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://nvd.nist.gov/vuln/detail/CVE-2021-27104
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-13874
• https://www.accellion.com/products/fta/
• https://github.com/accellion/CVEs/blob/main/CVE-2021-27104.txt