Latest CrushFTP vulnerability #
CrushFTP disclosed that a vulnerability in their file transfer product allows an unauthenticated attacker to access the host's file system. No CVE has yet to be assigned for this issue and CrowdStrike has indicated that this issue is being actively exploited in the wild. Additional details can be found in this article by Sergiu Gatlan at BleepingComputer.
What is the impact? #
This issue affects all CrushFTP versions prior to 10.7.1 and CrushFTP 11 releases prior to patch 11.1.0. An unauthenticated attacker can abuse this issue to read files from the host's file system.
Are updates or workarounds available? #
CrushFTP has released versions 10.7.1 and 11.1.0 to address this issue.
How do I find potentially vulnerable systems with runZero? #
From the Asset Inventory, use the following query to locate systems running potentially vulnerable software:
product:crushftp
