CRITICAL🇵🇱 Wersja polska

CVE-2020-14057

CVSS 9.8v3.1pub. 2020-07-01upd. 2024-11-21

Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allowing an attacker to gain remote code execution in common deployments.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Monstaftp Monsta Ftp

    APP
    Monstaftp
    ≤ 2.10.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2025-34299CRITICAL9.3PL ✓ten sam produkt

Monsta FTP: nieuwierzytelniony upload pliku prowadzący do RCE

CVE-2022-27468CRITICAL9.8ten sam produkt

Monstaftp v2.10.3 was discovered to contain an arbitrary file upload which allows attackers to execute arbitra...

CVE-2022-27469CRITICAL9.8ten sam produkt

Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF).

CVE-2020-14056CRITICAL9.8ten sam produkt

Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to insufficient restric...

CVE-2020-14055MEDIUM6.1ten sam produkt

Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due...