CVE-2024-4040

high-risk
Published 2024-04-22

A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform remote code execution on the server.

Do I need to act?

!
94.4% chance of exploitation in next 30 days
EPSS score — higher than 6% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Crushftp

References (15)

Exploit https://github.com/airbus-cert/CVE-2024-4040
Press/Media Coverage https://www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exp...
Patch https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update
Patch https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update
Third Party Advisory https://www.rapid7.com/blog/post/2024/04/23/etr-unauthenticated-crushftp-zero-da...
Exploit https://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_2024...
Issue Tracking https://www.reddit.com/r/cybersecurity/comments/1c850i2/all_versions_of_crush_ft...
Exploit https://github.com/airbus-cert/CVE-2024-4040
Press/Media Coverage https://www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exp...
Patch https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update
Patch https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update
Third Party Advisory https://www.rapid7.com/blog/post/2024/04/23/etr-unauthenticated-crushftp-zero-da...
Exploit https://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_2024...
Issue Tracking https://www.reddit.com/r/cybersecurity/comments/1c850i2/all_versions_of_crush_ft...
US Government Resource https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-...
64
/ 100
high-risk
Severity 32/34 · Critical
Exploitability 27/34 · High
Exposure 5/34 · Minimal