Read the docs

Ftp-srv Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ftp-srv Project records in CISA KEV

No Ftp-srv Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Ftp-srv · all components

TI-2020-16120 CVE-2020-26299 · GHSA-pmw4-jgxx-pcq9

File System Bounds Escape

Priority MEDIUM 45

ftp-srv is an open-source FTP server designed to be simple yet configurable.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.01886 Published 2021-02-10 Fixed in 4.4.0 CWE-22
TI-2020-11924 CVE-2020-15152 · GHSA-jw37-5gqr-cf9j

Server-Side Request Forgery in ftp-srv

Priority MEDIUM 43

ftp-srv is an npm package which is a modern and extensible FTP server designed to be simple yet configurable.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01859 Published 2020-08-17 Fixed in 2.19.6, 3.1.2 +1 CWE-918
Open these records in search →