Skip to content

Commit 460459c

Browse files
remmons-r7jvoisin
andauthored
Remove CVE identifier reference in description
Co-authored-by: Julien Voisin <[email protected]>
1 parent 459034f commit 460459c

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

modules/auxiliary/gather/crushftp_authbypass_cve_2025_2825.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ def initialize(info = {})
1515
This module leverages an authentication bypass in CrushFTP 11 < 11.3.1 and 10 < 10.8.4. Attackers
1616
with knowledge of a valid username can provide a crafted S3 authentication header to the CrushFTP web API
1717
to authenticate as that user without valid credentials. When successfully executed, the exploit will
18-
output working session cookies for the target user account. This vulnerability is tracked as CVE-2025-2825.
18+
output working session cookies for the target user account.
1919
},
2020
'License' => MSF_LICENSE,
2121
'Author' => [

0 commit comments

Comments
 (0)