monstaftp monsta ftp

Name: monstaftp monsta ftp
Brand: monstaftp

productUS

cpe:2.3:a:monstaftp:monsta_ftp:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

5critical0high1medium0low

updated 2026-10-28

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-34299US	critical9.8	72.7% (99th)	Exploit	no fix	2025-11-07	≤ 2.11
CVE-2020-14057US	critical9.8	2.58% (85th)	—	no fix	2020-07-01	≤ 2.10.1
CVE-2022-27468US	critical9.8	2.15% (82nd)	—	no fix	2022-04-26	= 2.10.3
CVE-2022-27469US	critical9.8	1.39% (72nd)	—	no fix	2022-04-26	= 2.10.3
CVE-2020-14056US	critical9.8	1.33% (71st)	—	no fix	2020-07-01	≤ 2.10.1
CVE-2020-14055US	medium6.1	0.70% (53rd)	—	no fix	2020-07-01	≤ 2.10.1

The flaw types (CWEs) most of these CVEs share.

CWE-434Unrestricted Upload of File with Dangerous Type2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-610Externally Controlled Reference to a Resource in Another Sphere1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.