Description
CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover.
Advisories 1
- WID-SEC-2024-3752 CrushFTP: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Dec 23, 2024
Critical · 9.8
CVE-2024-53552
EUVD-2024-51989GHSA-3743-c947-mrhr
CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover.
Published Dec 10, 2024 · Updated Dec 11, 2024 · Assigned by mitre