CVE-2022-22836

Publication date

2022-01-08 22:30:11

Family

mitre

State

PUBLISHED

Description

CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request.