CVE-2024-4040

nvd nist nuclei

Published: Apr 22, 2024Modified: Jun 17, 2026CISA KEV

10.0

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 6.0

Source: NVD

Description

A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform remote code execution on the server.

Affected (2)

Products: Crushftp: Crushftp

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Crushftp Crushftp	From 10.0.0 to 10.7.1
Crushftp Crushftp	From 11.0.0 to 11.1.0

Related CWEs

Improper Neutralization of Special Elements Used in a Template Engine

The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine.

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (15)

https://github.com/airbus-cert/CVE-2024-4040

Source: 430a6cef-dc26-47e3-9fa8-52fb7f19644e

ExploitThird Party Advisory

https://www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exploited-zero-day-immediately/

Source: 430a6cef-dc26-47e3-9fa8-52fb7f19644e

Press/Media CoverageThird Party Advisory

https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update

Source: 430a6cef-dc26-47e3-9fa8-52fb7f19644e

PatchVendor Advisory

https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update

Source: 430a6cef-dc26-47e3-9fa8-52fb7f19644e

PatchVendor Advisory

https://www.rapid7.com/blog/post/2024/04/23/etr-unauthenticated-crushftp-zero-day-enables-complete-server-compromise/

Source: 430a6cef-dc26-47e3-9fa8-52fb7f19644e

Third Party Advisory

https://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_20240419_crushftp_virtual/

Source: 430a6cef-dc26-47e3-9fa8-52fb7f19644e

ExploitIssue Tracking

https://www.reddit.com/r/cybersecurity/comments/1c850i2/all_versions_of_crush_ftp_are_vulnerable/

Source: 430a6cef-dc26-47e3-9fa8-52fb7f19644e

Issue TrackingPatch

https://github.com/airbus-cert/CVE-2024-4040

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exploited-zero-day-immediately/

Source: af854a3a-2127-422b-91ae-364da2661108

Press/Media CoverageThird Party Advisory

https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://www.rapid7.com/blog/post/2024/04/23/etr-unauthenticated-crushftp-zero-day-enables-complete-server-compromise/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_20240419_crushftp_virtual/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue Tracking

https://www.reddit.com/r/cybersecurity/comments/1c850i2/all_versions_of_crush_ftp_are_vulnerable/

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatch

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4040

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.