CVE-2023-24042
A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwri...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context->FileName.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report github.com