CVE-2022-27468

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p81

Published

Apr 26, 2022 (Apr 26, 2022)

Modified

Jun 17, 2026

Description

Monstaftp v2.10.3 was discovered to contain an arbitrary file upload which allows attackers to execute arbitrary code via a crafted file uploaded to the web server.

Vendors: monstaftp
Products: monsta ftp
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.