High severity7.5NVD Advisory· Published Oct 10, 2017· Updated Jun 17, 2026
CVE-2015-2856
CVE-2015-2856
Description
Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a .. (dot dot) in the statecode cookie.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*range: <=fta_9_11_200
- (no CPE)range: < FTA_9_11_210
Patches
Vulnerability mechanics
References
1- www.rapid7.com/db/modules/auxiliary/scanner/http/accellion_fta_statecode_file_readnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.