high CISA KEV

CVE-2024-4040

CrushFTP VFS Sandbox Escape Vulnerability

// Description

CrushFTP contains an unspecified sandbox escape vulnerability that allows a remote attacker to escape the CrushFTP virtual file system (VFS).

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Federal remediation due May 1, 2024 — past due