Vulnerability fixed in CrushFTP

🗓️ 07 Apr 2025 14:03:59Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 6 Views

CrushFTP fixed CVE-2025-2825 remote access in affected versions; DMZ Proxy unaffected.

Reporter	Title	Published	Views	Family All 62
GithubExploit	Exploit for CVE-2025-2825	22 Jul 202510:40	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	21 Oct 202517:49	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	20 Feb 202613:40	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	6 Jun 202509:14	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	8 Apr 202515:37	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	10 Sep 202500:20	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	21 Apr 202523:57	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	23 May 202521:04	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	29 Oct 202523:17	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Ivanti Endpoint_Manager	9 May 202403:10	–	githubexploit

Source	Link
crushftp	www.crushftp.com/crush11wiki/Wiki.jsp
crushftp	www.crushftp.com/version10.html

07 Apr 2025 14:03Current

6.8Medium risk

Vulners AI Score6.8

CVSS 49.2

CVSS 3.19.8

EPSS0.99957

SSVC

CrushFTP CVE-2025-2825 Remote access Affected versions