Lucene search
+L

1 matches found

RubySec
RubySec
added 2021/07/13 12:00 a.m.12 views

Trusting FTP PASV responses vulnerability in Net::FTP

An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP server can use the PASV response to trick Net::FTP into connecting back to a given IP address and port. This potentially makes curl extract information about services that are otherwise...

5.8CVSS7AI score0.0305EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder