Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r8j5-pj3m-qhpv

Опубликовано: 26 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed (CRLF) sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and inject arbitrary FTP commands, potentially leading to arbitrary code execution or other severe impacts.

A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed (CRLF) sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and inject arbitrary FTP commands, potentially leading to arbitrary code execution or other severe impacts.

EPSS

Процентиль: 26%
0.00094
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-93

Связанные уязвимости

CVSS3: 4.3
ubuntu
3 месяца назад

A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed (CRLF) sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and inject arbitrary FTP commands, potentially leading to arbitrary code execution or other severe impacts.

CVSS3: 4.3
redhat
3 месяца назад

A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed (CRLF) sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and inject arbitrary FTP commands, potentially leading to arbitrary code execution or other severe impacts.

CVSS3: 4.3
nvd
3 месяца назад

A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed (CRLF) sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and inject arbitrary FTP commands, potentially leading to arbitrary code execution or other severe impacts.

CVSS3: 4.3
debian
3 месяца назад

A flaw was found in the FTP GVfs backend. A remote attacker could expl ...

suse-cvrf
около 2 месяцев назад

Security update for gnome-online-accounts, gvfs

EPSS

Процентиль: 26%
0.00094
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-93