CVE-2020-14057

CRITICAL

Monsta FTP < 2.10.1 - Arbitrary File Read and Write via Path Traversal

Title source: llm
STIX 2.1

Description

Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allowing an attacker to gain remote code execution in common deployments.

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.0258
EPSS Percentile 83.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-610
Status published
Products (1)
monstaftp/monsta_ftp < 2.10.1
Published Jul 01, 2020
Tracked Since Feb 18, 2026