CVE-2022-50934

Опубликовано: 13 янв. 2026

Источник: nvd

Описание

Rejected reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue.

Связанные уязвимости

GHSA-5wrh-xjpw-88r6

CVSS3: 8.8

github

25 дней назад

Wing FTP Server versions 4.3.8 and below contain an authenticated remote code execution vulnerability that allows attackers to execute arbitrary PowerShell commands through the admin interface. Attackers can leverage a crafted Lua script payload with base64-encoded PowerShell to establish a reverse TCP shell by authenticating and sending a malicious request to the admin panel.