PT-2020-13868
CVE-2020-14057
·
تاريخ النشر
2020-07-01
·
تاريخ التحديث
2020-07-08
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Monsta FTP versions 2.10.1 and earlier
Description
The issue allows external control of paths used in filesystem operations, enabling attackers to read and write arbitrary local files. This can lead to an attacker gaining remote code execution in common deployments.
Recommendations
For Monsta FTP versions 2.10.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾