VYPR

ftp

by Erlang

Source repositories

CVEs (1)

  • CVE-2026-48858MedJun 10, 2026
    risk 0.35cvss 6.5epss 0.00

    Server-Side Request Forgery (SSRF) vulnerability in Erlang/OTP ftp (ftp_internal module) allows FTP bounce attacks and SSRF via an unvalidated PASV response IP address. The ftp_internal:handle_ctrl_result/2 PASV handler (mode=passive, ipfamily=inet, ftp_extension=false)…