CVE-2023-2990 Fortra Globalscape Administration Server Denial of Service

2023-06-2219:17:28

CWE-400

rapid7

www.cve.org

fortra globalscape eft

denial of service

infinite recursion

vulnerability

EPSS

0.001

Percentile

30.8%

JSON

Fortra Globalscape EFT versions before 8.1.0.16 suffer from a denial of service vulnerability, where a compressed message that decompresses to itself can cause infinite recursion and crash the service

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Globalscape EFT",
    "vendor": "Fortra",
    "versions": [
      {
        "lessThan": "8.1.0.16",
        "status": "affected",
        "version": "8.0.0",
        "versionType": "semver"
      }
    ]
  }
]