← All advisories

Critical severity9.1NVD Advisory· Published Jun 9, 2022· Updated Jun 17, 2026

CVE-2022-31827

CVE-2022-31827

Description

MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the function performFetchRequest at HTTPFetcher.php.

Affected products

3

Monstaftp/Monstaftp2 versions
cpe:2.3:a:monstaftp:monstaftp:2.10.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:monstaftp:monstaftp:2.10.3:*:*:*:*:*:*:*
- (no CPE)
Monsta/Monsta FTPllm-fuzzy
Range: = 2.10.3

Patches

Vulnerability mechanics

References

1

github.com/zer0yu/CVE_Request/blob/master/MonstaFTP/MonstaFTP_v2_10_3_SSRF.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.