HTTP Header Vulnerability in CrushFTP Versions by CrushFTP
CVE-2017-14037

6.1MEDIUM

Key Information:

Vendor
Crushftp
Status
Crushftp
Vendor
CVE Published:
30 August 2017

Summary

CrushFTP prior to versions 7.8.0 and 8.2.0 is susceptible to an HTTP header vulnerability, which could potentially allow attackers to manipulate header content. This flaw could lead to various security issues, including unauthorized access and data exposure. Users are encouraged to update their CrushFTP installations to mitigate these vulnerabilities effectively.

References

https://crushftp.com/version8.html
x_refsource_CONFIRM
https://crushftp.com/version7.html
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.