Skip to content
OpenAdvisories

Vendor

CrushFTP

7 known vulnerabilities.

Products

CrushFTP 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.0
    CVE-2025-32102

    CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows SSRF via the host and port parameters in a command=…

    CrushFTP CrushFTP
  • Medium 5.0
    CVE-2025-32103 EPSS 18%

    CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/…

    CrushFTP CrushFTP