5 matches found
basic-ftp: Uncaught exception crashes the Node.js process when a password (or resumed-download path) contains CR/LF
Summary Client.login calls FTPContext.send from inside the control-socket data event handler. send throws on CR, LF or NUL, and nothing catches the throw. A password containing \r\n therefore raises an uncaught exception and terminates the whole Node.js process. It does not reject the returned...
5.9CVSS6.3AI score0.01672EPSS
SaveExploits0References4Affected Software1
20