TI-2025-24432 CVE-2025-34299 · GHSA-42m5-3r2p-wr92
Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload
Priority CRITICAL 86
Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads.
Monstaftp
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Monstaftp records in CISA KEVNo Monstaftp vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Monsta Ftp · all components
TI-2020-11009 CVE-2020-14057 · GHSA-689r-4r32-c586
Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations.
Priority MEDIUM 47
Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations.
TI-2022-10484 CVE-2022-27468 · GHSA-xhjm-9p9r-cp2g
Monstaftp v2.10.3 was discovered to contain an arbitrary file upload which allows…
Priority MEDIUM 46
Monstaftp v2.10.3 was discovered to contain an arbitrary file upload which allows attackers to execute arbitrary code via a crafted file uploaded to the web server.
TI-2022-10485 CVE-2022-27469 · GHSA-rxjg-q5c5-6q8f
Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF).
Priority MEDIUM 45
Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF).
TI-2020-11008 CVE-2020-14056 · GHSA-f4vx-g36r-6qrr
Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to…
Priority MEDIUM 45
Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to insufficient restriction of the web fetch functionality.
TI-2020-11007 CVE-2020-14055 · GHSA-5f98-ph8j-xwqh
Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the…
Priority LOW 28
Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding.