Skip to content
OpenAdvisories

Package · npm

ftp-srv

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.3
    CVE-2020-26299

    File System Bounds Escape

    ftp-srv is an open-source FTP server designed to be simple yet configurable. In ftp-srv before version 4.4.0 there is a path-traversal vulnerability. Clients of FTP servers utilizing ftp-srv hosted on Windows machines can escape the FTP user's defined root fo…

    autovance ftp-srv ftp-srv npm
  • High —
    GHSA-r4m5-47cq-6qg8

    Server-Side Request Forgery in ftp-srv

    All versions of `ftp-srv` from v1.0.0 onward to v4.3.3 are vulnerable to Server-Side Request Forgery (SSRF). The package fails to prevent remote clients to access other resources in the network, for example when connecting to the server through telnet. This a…

    ftp-srv npm
  • Critical 9.1
    CVE-2020-15152

    Server-Side Request Forgery in ftp-srv

    ftp-srv is an npm package which is a modern and extensible FTP server designed to be simple yet configurable. In ftp-srv before versions 2.19.6, 3.1.2, and 4.3.4 are vulnerable to Server-Side Request Forgery. The PORT command allows arbitrary IPs which can be…

    autovance ftp-srv ftp-srv npm