CVE-2017-14037

CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability.

mitre·CWE-93·Published 2017-08-30

CVSS

—

EPSS

0.01

KEV

Exploits

cve.orgen

76 chars

CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability.

NVDen

76 chars

CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability.

NVDes

115 chars

CrushFTP en versiones anteriores a la 7.8.0 y 8.x anteriores a la 8.2.0 tiene una vulnerabilidad de cabeceras HTTP.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N
3.0	Primary	NVD	6.1	2.8	2.7	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N