CVE-2025-34110
ColoradoFTP Server <= 1.3 Build 8 Path Traversal Information Disclosure
概要
ColoradoFTP Server <= 1.3 Build 8 Path Traversal Information Disclosure
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A directory traversal vulnerability exists in ColoradoFTP Server ≤ 1.3 Build 8 for Windows, allowing unauthenticated attackers to read or write arbitrary files outside the configured FTP root directory. The flaw is due to insufficient sanitation of user-supplied file paths in the FTP GET and PUT command handlers. Exploitation is possible by submitting traversal sequences during FTP operations, enabling access to system-sensitive files. This issue affects only the Windows version of ColoradoFTP.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- patch bitbucket.org
- report raw.githubusercontent.com
- report exploit-db.com