CVE-2024-4040

Опубликовано: 22 апр. 2024

Источник: nvd

CVSS3: 9.8

CVSS3: 10

EPSS Критический

Описание

A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform remote code execution on the server.

Ссылки

https://github.com/airbus-cert/CVE-2024-4040
Exploit
Third Party Advisory
https://www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exploited-zero-day-immediately/
Press/Media Coverage
Third Party Advisory
https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update
Patch
Vendor Advisory
https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update
Patch
Vendor Advisory
https://www.rapid7.com/blog/post/2024/04/23/etr-unauthenticated-crushftp-zero-day-enables-complete-server-compromise/
Third Party Advisory
https://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_20240419_crushftp_virtual/
Exploit
Issue Tracking
https://www.reddit.com/r/cybersecurity/comments/1c850i2/all_versions_of_crush_ftp_are_vulnerable/
Issue Tracking
Patch
https://github.com/airbus-cert/CVE-2024-4040
Exploit
Third Party Advisory
https://www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exploited-zero-day-immediately/
Press/Media Coverage
Third Party Advisory
https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update
Patch
Vendor Advisory
https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update
Patch
Vendor Advisory
https://www.rapid7.com/blog/post/2024/04/23/etr-unauthenticated-crushftp-zero-day-enables-complete-server-compromise/
Third Party Advisory
https://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_20240419_crushftp_virtual/
Exploit
Issue Tracking
https://www.reddit.com/r/cybersecurity/comments/1c850i2/all_versions_of_crush_ftp_are_vulnerable/
Issue Tracking
Patch
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4040
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*

Версия от 10.0.0 (включая) до 10.7.1 (исключая)

cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*

Версия от 11.0.0 (включая) до 11.1.0 (исключая)

EPSS

Процентиль: 100%

0.94426

Критический

9.8 Critical

CVSS3

10 Critical

CVSS3

Дефекты

CWE-1336

CWE-94

Связанные уязвимости

GHSA-46vf-c8gj-2pgq

CVSS3: 7.7

github

почти 2 года назад

VFS Sandbox Escape in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows remote attackers with low privileges to read files from the filesystem outside of VFS Sandbox.

BDU:2024-03173

CVSS3: 8.6

fstec

почти 2 года назад

Уязвимость веб-интерфейса кроссплатформенного FTP-сервера CrushFTP, позволяющая нарушителю выйти из виртуальной файловой системы (VFS) и получить доступ к системным файлам

EPSS

Процентиль: 100%

0.94426

Критический

9.8 Critical

CVSS3

10 Critical

CVSS3

Дефекты

CWE-1336

CWE-94