PT-2017-13217

CVE-2017-14037

·

Published

2017-08-30

·

Updated

2017-09-02

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions CrushFTP versions prior to 7.8.0 CrushFTP versions 8.x prior to 8.2.0
Description The issue is related to an HTTP header vulnerability.
Recommendations For CrushFTP versions prior to 7.8.0, update to version 7.8.0 or later. For CrushFTP versions 8.x prior to 8.2.0, update to version 8.2.0 or later.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-93: Improper Neutralization of CRLF Sequences (\'CRLF Injection\')
Related identifiers
CVE-2017-14037
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com