Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to insufficient restriction of the web fetch functionality. This allows attackers to read arbitrary local files and interact with arbitrary third-party services.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Monsta FTP 代码问题漏洞
Vulnerability Description
Monsta FTP是新西兰Monsta公司的一款轻量级文件管理器。它支持文件传输、文件管理和文档编辑等功能。 Monsta FTP 2.10.1及之前版本中存在代码问题漏洞，该漏洞源于程序对Web抓取功能的限制不足。攻击者可利用该漏洞读取任意的本地文件并与任意第三方服务进行交互。
CVSS Information
N/A
Vulnerability Type
N/A