Em resumo
- CVE-2019-9648 é uma vulnerabilidade MÉDIO (CVSS 5.3) que afeta CoreFtp, core ftp (coreftp).
- Chance de exploração nos próximos 30 dias (EPSS): 14.3%, maior que 96.6% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
| Package | Affected versions | Patched versions |
|---|
| CoreFtp NuGet | ≤ 2.0
| No fix yet |
| core ftp | = 2.0
| No fix yet |
Description
An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a \..\..\ substring, allowing an attacker to enumerate file existence based on the returned information.
NVD description
An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a \..\..\ substring, allowing an attacker to enumerate file existence based on the returned information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free