1 result · Clear filters · Feed
-
High —
Server-Side Request Forgery in ftp-srv
All versions of `ftp-srv` from v1.0.0 onward to v4.3.3 are vulnerable to Server-Side Request Forgery (SSRF). The package fails to prevent remote clients to access other resources in the network, for example when connecting to the server through telnet. This a…