MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the function performFetchRequest at HTTPFetcher.php.

Published Jun 9, 2022 · Updated Aug 3, 2024 · Assigned by mitre