CVE-2025-34299

概要

参考情報

• labs.watchtowr.com/whats-that-coming-over-the-hill-monsta-ftp-remote-code-execution-cve-2025-34299 · Exploit
• monstaftp.com/notes · Release Notes
• vulncheck.com/advisories/monsta-ftp-unauthenticated-arbitrary-file-upload · Third Party Advisory

monsta ftp のその他の脆弱性

• CVE-2022-27469緊急 9.8Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF).
• CVE-2022-27468緊急 9.8Monstaftp v2.10.3 was discovered to contain an arbitrary file upload which allows attackers to execute arbitrary code via a crafted file upl…
• CVE-2020-14057緊急 9.8Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary…
• CVE-2020-14056緊急 9.8Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to insufficient restriction of the web fetch function…
• CVE-2020-14055中 6.1Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encodi…