---
id: 4253
title: "Accellion Kiteworks Multiple Vulnerabilities"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/accellion-kiteworks-advisory"
published_at: "2016-09-08T00:00:00Z"
tags: ["xss", "path-traversal", "advisory", "kiteworks", "accellion"]
phying_url: "https://phying.com/item/4253"
lang: en
---

# Accellion Kiteworks Multiple Vulnerabilities

## Summary

Advisory on three Accellion Kiteworks flaws: incorrect default permissions, cross-site scripting and path traversal (CVE-2016-5662 through CVE-2016-5664); fixed in kw2016.03.0.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2016-09-08T00:00:00Z
- **Original:** https://bishopfox.com/blog/accellion-kiteworks-advisory
- **Phying News:** https://phying.com/item/4253