Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pp79-4qx3-mf4h

Опубликовано: 26 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode (PASV) response. The client unconditionally trusts this information and attempts to connect to the specified endpoint, allowing the malicious server to probe for open ports accessible from the client's network.

A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode (PASV) response. The client unconditionally trusts this information and attempts to connect to the specified endpoint, allowing the malicious server to probe for open ports accessible from the client's network.

EPSS

Процентиль: 8%
0.00186
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 4.3
ubuntu
6 месяцев назад

A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode (PASV) response. The client unconditionally trusts this information and attempts to connect to the specified endpoint, allowing the malicious server to probe for open ports accessible from the client's network.

CVSS3: 4.3
redhat
6 месяцев назад

A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode (PASV) response. The client unconditionally trusts this information and attempts to connect to the specified endpoint, allowing the malicious server to probe for open ports accessible from the client's network.

CVSS3: 4.3
nvd
6 месяцев назад

A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode (PASV) response. The client unconditionally trusts this information and attempts to connect to the specified endpoint, allowing the malicious server to probe for open ports accessible from the client's network.

CVSS3: 4.3
debian
6 месяцев назад

A flaw was found in the FTP GVfs backend. A malicious FTP server can e ...

suse-cvrf
5 месяцев назад

Security update for gnome-online-accounts, gvfs

EPSS

Процентиль: 8%
0.00186
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-918