cve/2023/CVE-2023-43177.md

CVE-2023-43177

Description

CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes.

POC

Reference

• https://convergetp.com/2023/11/16/crushftp-zero-day-cve-2023-43177-discovered/

Github

• https://github.com/Mohammaddvd/CVE-2024-4040
• https://github.com/Ostorlab/KEV
• https://github.com/Y4tacker/JavaSec
• https://github.com/entroychang/CVE-2024-4040
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/tanjiti/sec_profile
• https://github.com/the-emmons/CVE-2023-43177