CVE-2022-27469

MonstaFTP v2.10.3 is affected by CVE-2022-27469, a Server-Side Request Forgery (SSRF) vulnerability. The RedHat/CNVD/CNNVD and NVD entries describe that the issue arises from improper input validation, enabling an attacker to cause SSRF and potentially access internal resources. The NVD notes CVS...

CVE-2022-27468

Summary: CVE-2022-27468 affects MonstaFTP v2.10.3, where an arbitrary file upload vulnerability in the web interface allows an attacker to execute arbitrary code on the server via a crafted upload. Affected software: MonstaFTP web UI (version 2.10.3). Vulnerability details: The root cause is lack...

CVE-2025-34299

Summary: Monsta FTP

CVE-2020-14057

Monsta FTP 2.10.1 and earlier versions are affected by an access-control flaw where external input can control filesystem paths, enabling reading/writing of local files and potential remote code execution. The issue is documented across multiple feeds (NVD CVE-2020-14057 and RH Red Hat advisories...

CVE-2020-14056

Monsta FTP 2.10.1 or earlier versions are affected by CVE-2020-14056, a server-side request forgery (SSRF) vulnerability stemming from insufficient restrictions on the web fetch functionality. This allows an attacker to read arbitrary local files and interact with arbitrary third-party services. ...

CVE-2020-14055

CVE-2020-14055 affects Monsta FTP versions 2.10.1 and earlier, with a stored XSS in the language setting caused by insufficient output encoding. The issue is documented across multiple sources (NVD, Red Hat, CNVD, OpenVAS) as a stored XSS in Monsta FTP. Impact is user-facing script injection via ...