CVE-2025-63419 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Cross Site Scripting (XSS) vulnerability in CrushFTP 11.3.6_48. The Web-Based Server has a feature where users can share files, the feature reflects the filenam…
Medium CVSS: 6.1

CVE-2025-63419

Cross Site Scripting (XSS) vulnerability in CrushFTP 11.3.6_48. The Web-Based Server has a feature where users can share files, the feature reflects the filename to an emailbody field with no sanitations leading to HTML Injection.
Vendor
Crushftp
Product
Crushftp
CWE
CWE-79
Yayın Tarihi
2025-11-12 17:15:38
Güncelleme
2025-12-31 16:34:12
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-79 Crushftp MEDIUM Crushftp 2025

Referanslar

https://gist.github.com/MMAKINGDOM/39ded58b1e6d2d19366e76e0d5b1c851 https://github.com/MMAKINGDOM/CVE-2025-63419/