5 matches found
CVE-2024-53552
CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover...
9.8CVSS7.2AI score0.00818EPSS
SaveExploits0References1
CVE-2024-53552
CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover...
9.8CVSS0.00818EPSS
SaveExploits0References1
CVE-2024-53552
CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover...
0.00818EPSS
SaveExploits0References1
CVE-2024-53552
The cross-platform FTP server CrushFTP is vulnerable to an account takeover due to a weak password recovery mechanism . Specifically, the software mishandles the password reset logic, which allows a remote attacker to gain access to a user account and full control over the application by resettin...
9.8CVSS6.8AI score0.00818EPSS
SaveExploits0References1Affected Software1
20