Globalscape Terms Patched -
While XSS is often dismissed as a "client-side" issue, in the context of an enterprise file transfer appliance, the impact was severe.
Keep your software up to date to maintain a secure environment. Regular updates ensure that you have the latest security patches and performance improvements.
Globalscape (now operating under Fortra) takes security vulnerabilities seriously. They routinely release public patches, security updates, and major version releases to mitigate risks that emerge across different components of the software. Types of Patches globalscape terms patched
Are you running a instance or a High-Availability (HA) cluster?
Globalscape transitioned from a 32-bit to a 64-bit application (v8.1) for better processing and security handling. While XSS is often dismissed as a "client-side"
Multiple Vulnerabilities in Fortra Globalscape EFT ... - Rapid7
Older versions failed to restrict the execution context of these scripts. If an attacker could upload a file with a maliciously crafted filename, the EFT engine would parse the filename as a command argument, leading to argument injection. Globalscape transitioned from a 32-bit to a 64-bit
Review the EFT.log file for successful initialization of updated modules.
Older versions like EFT 7.4.13.15 were patched to update OpenSSH to v7.9 and OpenSSL to v1.0.2q.