CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.0. See the original NVD description below for full technical details.
CVE
CVE-2025-32102
Severity
MEDIUM
CVSS
5
EPSS
7.14%
Original NVD Description
CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows SSRF via the host and port parameters in a command=telnetSocket request to the /WebInterface/function/ URI.
Related CVEs
Other vulnerabilities affecting the same vendor(s)