Description
A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context->FileName.
High · 7.5
CVE-2023-24042
EUVD-2023-28106GHSA-q2vp-hgh9-qp96
A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use…
Published Jan 21, 2023 · Updated Apr 2, 2025 · Assigned by mitre