CVE-2017-8304

An issue was discovered on Accellion FTA devices before FTA_9_12_180. courier/1000@/oauth/playground/callback.html allows XSS with a crafted URI.

Date published : 2017-05-05

https://gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb