CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/05/23 7:13 a.m.•10 views

CVE-2024-53552

CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover...

9.8CVSS7.2AI score0.00706EPSS

Exploits0References1

NVD•added 2024/12/10 2:15 a.m.•24 views

CVE-2024-53552

CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover...

9.8CVSS0.00706EPSS

Exploits0References1

Vulnrichment•added 2024/12/10 12:0 a.m.•17 views

CVE-2024-53552

CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover...

9.6AI score0.00706EPSS

Exploits0References1

CVE•added 2024/12/10 12:0 a.m.•87 views

CVE-2024-53552

CVE-2024-53552 affects CrushFTP 10 (up to 10.8.2) and 11 (up to 11.2.2); a flaw in the password reset mechanism allows an attacker to reset a user’s password via email and take full control of the account/application. The issue is confirmed in multiple sources and carries a high-severity impact (...

9.8CVSS6.8AI score0.00706EPSS

Exploits0References1Affected Software1