CVE-2023-24042
A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwri...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context->FileName.
Références
- advisory github.com
- advisory nvd.nist.gov
- report github.com