Monstaftp

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Monstaftp records in CISA KEV

No Monstaftp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Monsta Ftp 6 records CRITICAL Monstaftp 1 record MEDIUM

Records

7 records

TI-2025-24432 CVE-2025-34299 · GHSA-42m5-3r2p-wr92

Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload

CRITICAL 86

Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.7268 Published 2025-11-07 No fix listed CWE-434

TI-2022-13705 CVE-2022-31827 · GHSA-w54w-jfqh-pqhc

MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the…

MEDIUM 59

MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the function performFetchRequest at HTTPFetcher.php.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.21708 Published 2022-06-09 No fix listed CWE-918

TI-2020-11009 CVE-2020-14057 · GHSA-689r-4r32-c586

Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations.

MEDIUM 47

Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02576 Published 2020-07-01 No fix listed CWE-610

TI-2022-10484 CVE-2022-27468 · GHSA-xhjm-9p9r-cp2g

Monstaftp v2.10.3 was discovered to contain an arbitrary file upload which allows…

MEDIUM 46

Monstaftp v2.10.3 was discovered to contain an arbitrary file upload which allows attackers to execute arbitrary code via a crafted file uploaded to the web server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02146 Published 2022-04-26 No fix listed CWE-434

TI-2022-10485 CVE-2022-27469 · GHSA-rxjg-q5c5-6q8f

Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF).

MEDIUM 45

Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01387 Published 2022-04-26 No fix listed CWE-918

TI-2020-11008 CVE-2020-14056 · GHSA-f4vx-g36r-6qrr

Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to…

MEDIUM 45

Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to insufficient restriction of the web fetch functionality.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0133 Published 2020-07-01 No fix listed CWE-918

TI-2020-11007 CVE-2020-14055 · GHSA-5f98-ph8j-xwqh

Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the…

LOW 28

Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00699 Published 2020-07-01 No fix listed CWE-79

Open these records in search →

Critical	6
High	0
Medium	1
Low	0
No CVSS	0