CVE-2020-14057

—

CVSS 3.1

9.8 critical

EPSS

3%p84

Published

Jul 1, 2020 (Jul 1, 2020)

Modified

Jun 17, 2026

Description

Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allowing an attacker to gain remote code execution in common deployments.

Vendors: monstaftp
Products: monsta ftp
Weakness: CWE-610
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news0 stories

No ingested article mentions this CVE yet.