CVE-2024-53552
9.8CRITICALCrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover.
Publicado: 12/10/2024Actualizado: 6/27/2025
Descripción
CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover.
Análisis IAImpulsado por IA
Productos Afectados
crushftpcrushftp
crushftpcrushftp
Referencias
- https://www.crushftp.com/crush11wiki/Wiki.jsp?page=UpdateVendor Advisory