Threats tagged 'ghsa-24hg-mwfp-6pwj'

ProFTPD versions before 1.3.9e and 1.3.10rc5 have an authorization bypass vulnerability in the mod_sftp copy-file extension handler. This flaw allows authenticated SFTP users to bypass Limit WRITE checks when copying files, enabling them to create new files in directories where uploads are normally forbidden.