PT-2022-15704 · Unknown · Core Ftp Server

Published 2022-01-08 · Updated 2022-01-19 · CVE-2022-22836

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions CoreFTP Server versions prior to 727

Description The issue allows an authenticated attacker to perform directory traversal, enabling them to create files outside the intended directory structure by including ../ in an HTTP PUT request.

Recommendations For CoreFTP Server versions prior to 727, update to version 727 or later to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-22836

Affected Products

Core Ftp Server

References · 5

• 🔥 https://yoursecuritybores.me/coreftp-vulnerabilities · Exploit
• 🔥 https://exploit-db.com/exploits/50652 · Exploit
• http://coreftp.com/forums/viewtopic.php?f=15&t=4022509 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22836 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22836 · Security Note