CVE-2024-22910

MEDIUM 6.1CVE-2024-22910 · Published 14/05/2024 · updated 17/06/2026

In short

CVE-2024-22910 is a MEDIUM (CVSS 6.1) vulnerability affecting crushftp (crushftp).
Chance of exploitation in the next 30 days (EPSS): 0.50%, higher than 43.1% of all vulnerabilities.
Fix: update to 10.6.1 or later.

Package	Affected versions	Patched versions
crushftp crushftp	`< 10.6.1`	`10.6.1`

Cross Site Scripting (XSS) vulnerability in CrushFTP v.10.6.0 and v.10.5.5 allows an attacker to execute arbitrary code via a crafted payload.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 10.6.1

10.6.1

More vulnerabilities in crushftp

See all →