| Package | Affected versions | Patched versions |
|---|---|---|
| surgeftp | ≤ 2.3a1 |
The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service (restart) via a malformed response to a PASV command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free