Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-34299

Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload

Description

Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitrary code by uploading a specially crafted file from a malicious (S)FTP server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Monsta Limited of New Zealand Monsta FTP

Default version status: unaffected

  • 0 to ≤ 2.11affected

References