Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd430a6cef-dc26-47e3-9fa8-52fb7f19644eNVD:CVE-2024-4040
HistoryApr 22, 2024 - 8:15 p.m.

CVE-2024-4040

2024-04-2220:15:07
CWE-1336
CWE-94
430a6cef-dc26-47e3-9fa8-52fb7f19644e
web.nvd.nist.gov
6
cve-2024-4040
crushftp
server side template injection
remote code execution
filesystem access
bypass authentication
administrative access

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

10

Confidence

High

EPSS

0.965

Percentile

99.6%

JSON

A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform remote code execution on the server.

Affected configurations

Nvd
Node
crushftpcrushftpRange10.0.0–10.7.1
OR
crushftpcrushftpRange11.0.0–11.1.0
VendorProductVersionCPE
crushftpcrushftp*cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*

Related

metasploit 1
githubexploit 15
cve 1
nessus 2
thn 1
cisa_kev 1
vulnrichment 1
rapid7blog 2
wizblog 1
qualysblog 1
cvelist 1
packetstorm 1
nuclei 1
attackerkb 1
metasploit
metasploit
CrushFTP Unauthenticated Arbitrary File Read
2024-04-30 16:43:37
githubexploit
githubexploit
Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Crushftp
2024-05-13 17:33:36
Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Crushftp
2024-04-25 19:51:38
Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Crushftp
2024-04-25 19:51:38
cve
cve
CVE-2024-4040
2024-04-22 20:15:07
nessus
nessus
CrushFTP < 10.7.1 / 11.x < 11.1.0 Sandbox Escape (CVE-2024-4040) (Direct Check)
2024-04-26 00:00:00
CrushFTP < 10.7.1 / 11.x < 11.1.0 Sandbox Escape (CVE-2024-4040)
2024-04-24 00:00:00
thn
thn
Critical Update: CrushFTP Zero-Day Flaw Exploited in Targeted Attacks
2024-04-20 05:18:00
cisa_kev
cisa_kev
CrushFTP VFS Sandbox Escape Vulnerability
2024-04-24 00:00:00
vulnrichment
vulnrichment
CVE-2024-4040 Unauthenticated arbitrary file read and remote code execution in CrushFTP
2024-04-22 19:21:46
rapid7blog
rapid7blog
Unauthenticated CrushFTP Zero-Day Enables Complete Server Compromise
2024-04-23 15:26:06
Metasploit Wrap-Up 05/10/2024
2024-05-10 20:12:01
wizblog
wizblog
CVE-2024-4040 exploited in the wild: everything you need to know
2024-04-24 16:15:18
qualysblog
qualysblog
CrushFTP Zero-Day Exploitation Due to CVE-2024-4040
2024-04-30 18:45:58
cvelist
cvelist
CVE-2024-4040 Unauthenticated arbitrary file read and remote code execution in CrushFTP
2024-04-22 19:21:46
packetstorm
packetstorm
CrushFTP Unauthenticated Arbitrary File Read
2024-08-31 00:00:00
nuclei
nuclei
CrushFTP VFS - Sandbox Escape LFR
2024-04-23 11:49:51
attackerkb
attackerkb
CVE-2024-4040
2024-04-22 00:00:00

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

10

Confidence

High

EPSS

0.965

Percentile

99.6%

JSON
Related for NVD:CVE-2024-4040
metasploit1githubexploit15cve1nessus2thn1cisa_kev1vulnrichment1rapid7blog2wizblog1qualysblog1cvelist1packetstorm1nuclei1attackerkb1