github.com/drakkan/sftpgo/v2 vulnerabilities (Go)
12 vulnerabilities.
-
github.com/drakkan/sftpgo/v2Go SFTPGo source-side file-pattern filter bypass during copy operations 4.3 Medium -
github.com/drakkan/sftpgo/v2Go SFTPGo: Denial of service via malformed SSH channel request 6.5 Medium -
github.com/drakkan/sftpgo/v2Go SFTPGo: Stored XSS via inline parameter on public shares and user file download 3.7 Low -
github.com/drakkan/sftpgo/v2Go SFTPGo: Path confinement bypass in public browsable share partial ZIP download 5.9 Medium -
github.com/drakkan/sftpgo/v2Go SFTPGo improperly sanitizes placeholders in group home directories/key prefixes 5.3 Medium -
github.com/drakkan/sftpgo/v2Go SFTPGo has a Path Traversal and Permission Bypass via Path Normalization Discrepancy 5.3 Medium -
github.com/drakkan/sftpgo/v2Go Insufficient sanitization of user provided rsync command in SFTPGo 7.5 High -
github.com/drakkan/sftpgo/v2Go Brute force takeover of OpenID Connect session cookies in sftpgo 5.3 Medium -
github.com/drakkan/sftpgo/v2Go SFTPGo allows administrators to restrict command execution from the EventManager 5.1 Medium -
github.com/drakkan/sftpgo/v2Go Insufficient access control for password reset in sftpgo 5.4 Medium -
github.com/drakkan/sftpgo/v2Go XSS Vulnerabilities in WebClient 6.1 Medium -
github.com/drakkan/sftpgo/v2Go Recovery codes abuse in SFTPGo 8.3 High