PT-2022-15704
CVE-2022-22836
·
Published
2022-01-08
·
Updated
2022-01-19
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
CoreFTP Server versions prior to 727
Description
The issue allows an authenticated attacker to perform directory traversal, enabling them to create files outside the intended directory structure by including ../ in an HTTP PUT request.
Recommendations
For CoreFTP Server versions prior to 727, update to version 727 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾