4 matches found
CVE-2022-31827
MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery SSRF via the function performFetchRequest at HTTPFetcher.php...
GO-2022-0253 Resource exhaustion via GZIP bomb in github.com/cloudflare/cfrpki
The HTTPFetcher.GetXML function reads a response of unlimited size into memory, permitting resource exhaustion...
CVE-2022-31827
MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery SSRF via the function performFetchRequest at HTTPFetcher.php...
Monsta FTP 代码问题漏洞
Monsta FTP is a modern web interface for FTP. A security vulnerability exists in Monsta FTP version v2.10.3, which stems from a server-side request forgery SSRF vulnerability discovered via the performFetchRequest function in HTTPFetcher.php...