github.com/drakkan/sftpgo vulnerabilities (Go)
12 vulnerabilities.
-
github.com/drakkan/sftpgoGo SFTPGo source-side file-pattern filter bypass during copy operations 4.3 Medium -
github.com/drakkan/sftpgoGo SFTPGo: Denial of service via malformed SSH channel request 6.5 Medium -
github.com/drakkan/sftpgoGo SFTPGo: Stored XSS via inline parameter on public shares and user file download 3.7 Low -
github.com/drakkan/sftpgoGo SFTPGo: Path confinement bypass in public browsable share partial ZIP download 5.9 Medium -
github.com/drakkan/sftpgoGo SFTPGo improperly sanitizes placeholders in group home directories/key prefixes 5.3 Medium -
github.com/drakkan/sftpgoGo SFTPGo has a Path Traversal and Permission Bypass via Path Normalization Discrepancy 5.3 Medium -
github.com/drakkan/sftpgoGo Insufficient sanitization of user provided rsync command in SFTPGo 7.5 High -
github.com/drakkan/sftpgoGo Brute force takeover of OpenID Connect session cookies in sftpgo 5.3 Medium -
github.com/drakkan/sftpgoGo SFTPGo allows administrators to restrict command execution from the EventManager 5.1 Medium -
github.com/drakkan/sftpgoGo Insufficient access control for password reset in sftpgo 5.4 Medium -
github.com/drakkan/sftpgoGo XSS Vulnerabilities in WebClient 6.1 Medium -
github.com/drakkan/sftpgoGo Recovery codes abuse in SFTPGo 8.3 High