Threats tagged 'ghsa-mw3w-3jx9-mhff'

CVE-2024-48651 is a vulnerability in ProFTPD versions through 1.3.8b before commit cec01cc where supplemental group inheritance incorrectly grants unintended access to the root group (GID 0). This occurs due to the lack of supplemental groups from the mod_sql module, potentially allowing unauthorized access with high confidentiality impact.