Lftp Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Lftp Project records in CISA KEV

No Lftp Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lftp 1 record LOW

Records

1 record in Lftp · all components

TI-2018-07728 CVE-2018-10916 · GHSA-8mjf-52xq-g6h8

Improper input validation in [UNKNOWN] lftp

LOW 36

It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.04782 Published 2018-08-01 Partial fix CWE-20

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0