High severity7.5NVD Advisory· Published Oct 10, 2017· Updated May 13, 2026
CVE-2015-2856
CVE-2015-2856
Description
Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a .. (dot dot) in the statecode cookie.
Affected products
1- cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*Range: <=fta_9_11_200
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.rapid7.com/db/modules/auxiliary/scanner/http/accellion_fta_statecode_file_readnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.