Sploitus

CVE-2023-43177

6 known exploits for CVE-2023-43177

CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes.

Affected products
Crushftp
Crushftp
< 10.5.2
Fix
Available
CVSS 3.1
9.8 CRITICAL
EPSS
81.8% (100th percentile)
Weakness
CWE-913
NVD status
Modified
Published
2023-11-17
CVE-2023-43177 at NVD
Authoritative description, scoring and affected products

6 known exploits for CVE-2023-43177

Proof-of-concept code and exploit modules indexed by Sploitus

Exploit for Code Injection in Crushftp
2024-07-05 entroychangGITHUB
Exploit for Code Injection in Crushftp
2024-04-30 MohammaddvdGITHUB
CrushFTP Remote Code Execution Exploit
2024-04-15 Ryan EmmonsZDTRuby
CrushFTP Remote Code Execution
2024-04-15 Christophe de la Fuente, Ryan Emmons, metasploit.comPACKETSTORMRuby
CrushFTP Unauthenticated RCE
2024-04-12 Ryan Emmons, Christophe De La FuenteMETASPLOITRuby
Exploit for Improper Control of Dynamically-Managed Code Resources in Crushftp
2023-12-27 the-emmonsGITHUB