CVE-2017-5246 Biscom Secure File Transfer is vulnerable to AngularJS expression injection in the Display Name field. An authenticated user can populate this field with a valid AngularJS expression, wrapped in doubl...
MediumCVSS 4.3
EPSS 0.60%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Biscom Secure File Transfer is vulnerable to AngularJS expression injection in the Display Name field. An authenticated user can populate this field with a valid AngularJS expression, wrapped in double curly-braces ({{ }}). This expression will be evaluated by any other authenticated user who views the attacker's display name. Affected versions are 5.0.0000 through 5.1.1026. The Issue is fixed in 5.1.1028.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| biscom secure file transfer | All versions | No fix listed |
| biscom secure file transfer | = 5.0.0000 through 5.1.1026 | No fix listed |
References
- cve.biscom.com
- twitter.com third-party-advisory