CVE Feed

    Dashboard / CVE / CVE-2017-5241

    CVE-2017-5241

    Biscom Secure File Transfer versions 5.0.0.0 trough 5.1.1024 are vulnerable to post-authentication persistent cross-site scripting (XSS) in the "Name" and "Description" fields of a Workspace, as well as the "Description" field of a File Details pane of a file stored in a Workspace. This issue has been resolved in version 5.1.1025.

    Published:Jun 28, 2017
    Last Modified:Apr 20, 2025
    EPS:Jun 28, 2017
    EPSS Score:0.00388
    CVSS Score:5.4

    Affected Products

    Vendor
    Biscom
    Product
    Secure File Transfer

    Exploits

    https://community.rapid7.com/community/infosec/blog/2017/06/27/r7-2017-06-biscom-sftp-xss-cve-2017-5241https://community.rapid7.com/community/infosec/blog/2017/06/27/r7-2017-06-biscom-sftp-xss-cve-2017-5241

    Related CVEs

    CVE-2020-27646 (CVSS 6.5) — Biscom Secure File Transfer (SFT) before 5.1.1082 and 6.x before 6.0.1011 allows user credential theft.…
    CVE-2020-8796 (CVSS 9.8) — Biscom Secure File Transfer (SFT) before 5.1.1071 and 6.0.1xxx before 6.0.1005 allows Remote Code Execution on…
    CVE-2020-8503 (CVSS 6.5) — Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Dire…
    CVE-2016-10710 (CVSS 8.1) — Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses …
    CVE-2017-5247 (CVSS 5.4) — Biscom Secure File Transfer is vulnerable to cross-site scripting in the File Name field. An authenticated use…
    CVE-2017-5246 (CVSS 4.3) — Biscom Secure File Transfer is vulnerable to AngularJS expression injection in the Display Name field. An auth…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High