CVE-2018-18288

CrushFTP through 8.3.0 is vulnerable to credentials theft via URL redirection...