CVE-2025-34299

Mô tả

Tham khảo

• labs.watchtowr.com/whats-that-coming-over-the-hill-monsta-ftp-remote-code-execution-cve-2025-34299 · Exploit
• monstaftp.com/notes · Release Notes
• vulncheck.com/advisories/monsta-ftp-unauthenticated-arbitrary-file-upload · Third Party Advisory

Lỗ hổng khác của monsta ftp

• CVE-2022-27469NGHIÊM TRỌNG 9.8Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF).
• CVE-2022-27468NGHIÊM TRỌNG 9.8Monstaftp v2.10.3 was discovered to contain an arbitrary file upload which allows attackers to execute arbitrary code via a crafted file upl…
• CVE-2020-14057NGHIÊM TRỌNG 9.8Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary…
• CVE-2020-14056NGHIÊM TRỌNG 9.8Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to insufficient restriction of the web fetch function…
• CVE-2020-14055TRUNG BÌNH 6.1Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encodi…