All Vulnerability Incident Advisory AI This week Today

CVE intelligence

All SSH keys SSH login TLS certificates Certificate signing request Multi-factor authentication Secrets Patching Backups Least privilege Firewalls Logging Email authentication Disk encryption Offboarding Vendor access Password-protected zip Active Directory

All Essential Eight ISM / NIST CSF map IR first hour

All Hash Encode CIDR Timestamp Defang URLs IOC Diff Ports Permissions

All IR ACSC glossary AU compliance Cloud Concepts Crypto Detection DNS Frameworks Hardening Identity Logging Malware Network Practitioner Privacy Threat intel Vulnerability

About

CVE intelligence

CVE-2024-4040

CrushFTP VFS Sandbox Escape Vulnerability

Crushftp · Published 2024-04-22 · CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AVAttack Vector: Network
ACAttack Complexity: Low
PRPrivileges Required: None
UIUser Interaction: None
SScope: Changed
CConfidentiality: High
IIntegrity: High
AAvailability: High

critical · KEV listed 2024-04-24 · Action due 2024-05-01

Australia About GitHub cyberstack.org