CVE-2022-22836

CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request

published January 8, 2022

CVSS
—
EPSS
5%
Percentile
92.6
In the wild
Unconfirmed
What it is

CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05369 · 92.6th percentile
Published
2022-01-08T22:30Z
EPSS history
Timeline
  • 08 JAN 22:30Z
    CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request
    cvelistv5