以下是关于该漏洞的关键信息，以简洁的Markdown格式呈现： 漏洞信息概览 标题: Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload 严重性: CRITICAL 日期: November 7, 2025 影响范围 受影响软件: Monsta FTP <= 2.11 漏洞标识 CVE编号: CVE-2025-34299 漏洞类型 CWE编号: CWE-434 Unrestricted Upload of File with Dangerous Type CVSS评分 CVSS评分: 9.3 CVSS V4向量: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 参考资料 Monsta FTP Release Notes watchTowr Blog 描述 Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitrary code by uploading a specially crafted file from a malicious (S)FTP server. 发现者 发现者: Sonny of watchTowr