CVE-2024-53552
9.8CRITICALCrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover.
Опубликовано: 12/10/2024Обновлено: 6/27/2025
Описание
CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover.
ИИ-АнализНа базе ИИ
Затронутые продукты
crushftpcrushftp
crushftpcrushftp
Ссылки
- https://www.crushftp.com/crush11wiki/Wiki.jsp?page=UpdateVendor Advisory