1 matches found
Pterodactyl does not revoke SFTP access when server is deleted or permissions reduced
Summary Pterodactyl does not revoke active SFTP connections when a user is removed from a server instance or has their permissions changes with respect to file access over SFTP. This allows a user that was already connected to SFTP to remain connected and access files even after their permissions...
7.5CVSS6.8AI score0.00218EPSS
SaveExploits0References5Affected Software2
20