Description
CrushFTP contains an authentication bypass vulnerability that allows unauthenticated remote attackers to access administrative interfaces and sensitive functionality, potentially leading to complete server compromise.
Remediation
Upgrade to the latest version of CrushFTP
References
Related Vulnerabilities
Moodle Incorrect Calculation Vulnerability (CVE-2022-30600)
Joomla URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-24598)
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-17827)
Jetty Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-22201)
WordPress Plugin Live Product Editor for WooCommerce Security Bypass (4.6.2)