Crushftp Exploited Vulnerabilities

Crushftp vulnerabilities known to be exploited. Over the past 365 days, sorted by exploit discovery date.

JSON RSS CSV 🔔 Create Alert Trigger

Cross-Site Request Forgery Vulnerability in CrushFTP Affected by Default CSRF Protection Settings
CVE-2015-20129
CrushftpCrushftp👾🟡8.6HIGH
Cross Site Scripting Vulnerability in CrushFTP by CrushFTP Inc.
CVE-2025-63419
CrushFTP Inc.CrushFTP👾🟡6.1MEDIUM
Stored Cross-Site Scripting in CrushFTP Admin Panel
CVE-2025-63420
CrushFTPCrushFTP👾🟡4.1MEDIUM