CVE-2025-32103

Published Apr 15, 2025

Last updated a month ago

CrushFTP

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-32103 is a directory traversal vulnerability affecting CrushFTP versions 9.x, 10.x up to 10.8.4, and 11.x up to 11.3.1. It exists in the `/WebInterface/function/` URI, which allows attackers to read files accessible by SMB at UNC share pathnames, bypassing SecurityManager restrictions. The vulnerability stems from the application's failure to properly filter or restrict network paths when listing directories or files. By injecting a UNC path (e.g., `\\server\resource`) instead of a local path (e.g., `C:/PATH`), an attacker can gain unauthorized access to remote directories and files.

Description: CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files accessible by SMB at UNC share pathnames, bypassing SecurityManager restrictions.
Source: cve@mitre.org
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Secondary
Base score: 5
Impact score: 1.4
Exploitability score: 3.1
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Severity: MEDIUM

Weaknesses

cve@mitre.org: CWE-40
nvd@nist.gov: CWE-22

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CA3ADDE9-3460-4944-A2F1-11B0A1622A53",
            "versionEndIncluding": "11.3.1",
            "versionStartIncluding": "9.0.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.