Threats tagged 'ghsa-9238-xf4h-w28w'

MiCode FileExplorer includes an authentication bypass vulnerability in its embedded SwiFTP FTP server component. This flaw allows network attackers to log in without valid credentials by sending arbitrary username and password combinations to the PASS command handler, which grants access unconditionally. Exploitation enables attackers to list, read, write, and delete files accessible via the FTP server. The MiCode/Explorer project is no longer maintained, increasing risk for users relying on this software.