← All advisories

Critical severity9.8NVD Advisory· Published Nov 18, 2023· Updated Jun 17, 2026

CVE-2023-43177

CVE-2023-43177

Description

CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Crushftp/Crushftp3 versions
cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*range: <10.5.2
- (no CPE)
- (no CPE)range: <10.5.1

Patches

Vulnerability mechanics

References

2

convergetp.com/2023/11/16/crushftp-zero-day-cve-2023-43177-discovered/nvdExploitThird Party Advisory
github.com/the-emmons/CVE-Disclosures/blob/main/Pending/CrushFTP-2023-1.mdnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.