5 matches found
CVE-2024-53552
CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover...
9.8CVSS7.2AI score0.00818EPSS
SaveExploits0References1
CVE-2024-53552
CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover...
9.8CVSS0.00818EPSS
SaveExploits0References1
CVE-2024-53552
CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover...
0.00818EPSS
SaveExploits0References1
CVE-2024-53552
The cross-platform FTP server CrushFTP is vulnerable to an account takeover due to a flaw in its password reset mechanism . Specifically, the application mishandles the password reset logic, which allows a remote attacker to gain unauthorized access to a user's account and achieve full control ov...
6.8AI score0.00818EPSS
SaveExploits0References1Affected Software1
20