libcommons-net-java

1 result · Feed

• Medium 6.5
  CVE-2021-37533

  Apache Commons Net's FTP client trusts the host from PASV response by default

  Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may l…

  Apache Software Foundation Apache Commons Net libcommons-net-java commons-net:commons-net Debian Ubuntu Maven
  Dec 3, 2022