high
CISA KEV
CVE-2024-4040
CrushFTP VFS Sandbox Escape Vulnerability
Description
CrushFTP contains an unspecified sandbox escape vulnerability that allows a remote attacker to escape the CrushFTP virtual file system (VFS).
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal remediation due May 1, 2024 — past due
Advertisement