Vulnerability Description
Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allowing an attacker to gain remote code execution in common deployments.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Monstaftp | Monsta Ftp | <= 2.10.1 |
Related Weaknesses (CWE)
References
- https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20191203-01_MThird Party Advisory
- https://www.monstaftp.com/notes/Release NotesVendor Advisory
- https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20191203-01_MThird Party Advisory
- https://www.monstaftp.com/notes/Release NotesVendor Advisory
FAQ
What is CVE-2020-14057?
CVE-2020-14057 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allowing an attacker to gain remote code execu...
How severe is CVE-2020-14057?
CVE-2020-14057 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-14057?
Check the references section above for vendor advisories and patch information. Affected products include: Monstaftp Monsta Ftp.