https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:11:10.513702+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2009-5012 CVE-2009-5012 2026-10-02T23:11:10.543960+00:00

ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session.

 https://cve.radiocsirt.org/vuln/ghsa-h4g7-8m7r-87r9 GHSA-h4g7-8m7r-87r9 — Improper Access Control in pyftpdlib 2026-10-02T23:11:10.544012+00:00

Affected: PyPI: pyftpdlib

ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session.