Monstaftp

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Monstaftp records in CISA KEV

No Monstaftp vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Monstaftp · all components

TI-2022-13705 CVE-2022-31827 · GHSA-w54w-jfqh-pqhc

MEDIUM 59

MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the function performFetchRequest at HTTPFetcher.php.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.21708 Published 2022-06-09 No fix listed CWE-918