critical9.8
CVE-2020-14057
Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations.
Impact
Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allowing an attacker to gain remote code execution in common deployments.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Monstaftp | Monsta Ftp | through 2.10.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20191203-01_Monsta_FTP_Arbitrary_File_Read_and_Write
- https://www.monstaftp.com/notes/
- https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20191203-01_Monsta_FTP_Arbitrary_File_Read_and_Write
- https://www.monstaftp.com/notes/