We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 459034f commit 460459cCopy full SHA for 460459c
modules/auxiliary/gather/crushftp_authbypass_cve_2025_2825.rb
@@ -15,7 +15,7 @@ def initialize(info = {})
15
This module leverages an authentication bypass in CrushFTP 11 < 11.3.1 and 10 < 10.8.4. Attackers
16
with knowledge of a valid username can provide a crafted S3 authentication header to the CrushFTP web API
17
to authenticate as that user without valid credentials. When successfully executed, the exploit will
18
- output working session cookies for the target user account. This vulnerability is tracked as CVE-2025-2825.
+ output working session cookies for the target user account.
19
},
20
'License' => MSF_LICENSE,
21
'Author' => [
0 commit comments