https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T04:41:27.437572+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-5221 CVE-2020-5221 — Directory Traversal (Chroot Escape) vulnerability in uftpd 2026-10-15T04:41:27.452517+00:00

Affected: troglobit uftpd

In uftpd before 2.11, it is possible for an unauthenticated user to perform a directory traversal attack using multiple different FTP commands and read and write to arbitrary locations on the filesystem due to the lack of a well-written chroot jail in compose_abspath(). This has been fixed in version 2.11