NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

VulnerabilityPoC3

CVE-2021-25277

CVSS 3.1: 6.1 medium
EPSS: <1%p57
Published: Mar 19, 2021 · Mar 19, 2021
Modified: Jun 17, 2026

Analyze CVE-2021-25277 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component.

Vendors: ftapi

Products: ftapi

Weakness: CWE-79

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news

1 story

File Transfer Threats: Risk Factors and How Network Traffic Visibility Can Help

Palo Alto Unit 42Jun 6, 12:43 UTC · Jun 6, 2024VulnerabilityCVE-2021-24144 CVE-2021-24142 CVE-2021-25277+72

60