CVE-2021-27103

Accellion FTA's SSRF vulnerability was actively exploited, linked to ransomware attacks, impacting DIB organizations using the platform for data transfer and storage.

A server-side request forgery (SSRF) vulnerability in Accellion FTA allowed attackers to craft POST requests to wmProgressstat.html, enabling unauthorized access and data exfiltration, often preceding ransomware deployment. DIB organizations relying on FTA for sensitive data transfers face significant compliance risks (CMMC, NIST 800-171) and potential data breaches; immediate mitigation and forensic investigation are crucial.

Shame score — The SSRF vulnerability's exploitation by ransomware groups demonstrates a severe failure in secure coding practices and a lack of adequate vulnerability management, leading to significant data exposure.