critical9.8
CVE-2024-53552
CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover.
Impact
CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Crushftp | Crushftp | from 10.0.0 before 10.8.3 from 11.0.0 before 11.2.3 |