CVE-2017-14037

CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-08-30

Last modified

2024-09-17

Weaknesses

CWE-93

Affected products

• Crushftp (Crushftp)

References

• https://crushftp.com/version7.html
• https://crushftp.com/version8.html