Threats tagged 'ghsa-94cq-g9vr-5q43'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.0	CVE-2025-32103CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the Medium5.02025-04-15GCVE DatabaseCVE-2025-32103 CrushFTP versions 9.x, 10.x through 10.8.4, and 11.x through 11.3.1 contain a directory traversal vulnerability via the /WebInterface/function/ URI. This flaw allows an attacker with limited privileges to read files accessible through SMB UNC share pathnames, bypassing SecurityManager restrictions. The vulnerability has a medium severity rating with a CVSS score of 5. No patch information is currently provided. Report on CVE-2025-32103 Vulnerability CWE-22 #ghsa-94cq-g9vr-5q43	GCVE Database	2025-04-15

Page 1 of 1