CVE-2025-32102

概要

参考情報

• packetstorm.news/files/id/190460 · Exploit
• seclists.org/fulldisclosure/2025/Apr/17 · Mailing List
• crushftp.com · Product
• seclists.org/fulldisclosure/2025/Apr/17

crushftp のその他の脆弱性

• CVE-2025-63419中 6.1Cross Site Scripting (XSS) vulnerability in CrushFTP 11.3.6_48. The Web-Based Server has a feature where users can share files, the feature …
• CVE-2025-63420中 4.1CrushFTP11 before 11.3.7_57 is vulnerable to stored HTML injection in the CrushFTP Admin Panel (Reports / "Who Created Folder"), enabling pe…
• CVE-2025-54309緊急 9.8悪用確認済み（CISA KEV）CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows…
• CVE-2025-32103中 5.0CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files ac…
• CVE-2025-31161緊急 9.8悪用確認済み（CISA KEV）CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy insta…