CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.0. Its EPSS score suggests a 14.9% probability of exploitation in the next 30 days.
CVE
CVE-2025-32103
Severity
MEDIUM
CVSS
5
EPSS
14.90%
Original NVD Description
CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files accessible by SMB at UNC share pathnames, bypassing SecurityManager restrictions.
Related CVEs
Other vulnerabilities affecting the same vendor(s)