CVE-2020-14057 | BDVDB-2026-138331 Detail

Description#

Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allowing an attacker to gain remote code execution in common deployments.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.monstaftp.com/notes/
https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20191203-01_Monsta_FTP_Arbitrary_File_Read_and_Write

Exploit#

No public exploit known

History#

Version 12020-07-01Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.