| Package | Affected versions | Patched versions |
|---|---|---|
| crushftp | ≥ 10.0.0, < 10.8.3≥ 11.0.0, < 11.2.3 | 10.8.311.2.3 |
CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free