Codecrafters

codecrafters

3 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Ability Mail Server

ability_mail_server

Ability Ftp Server

ability_ftp_server

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-0547 1Codecrafters 1Ability Ftp Server Jun 17, 2026 Jan 15, 2024 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A vulnerability has been found in Ability FTP Server 2.34 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component APPE Command Handler. The manipulation leads to denial...Show more A vulnerability has been found in Ability FTP Server 2.34 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component APPE Command Handler. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250717 was assigned to this vulnerability.Show less
CVE-2019-9557 1Codecrafters 1Ability Mail Server Jun 17, 2026 Mar 12, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Ability Mail Server 4.2.6 has Persistent Cross Site Scripting (XSS) via the body e-mail body. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as a...Show more Ability Mail Server 4.2.6 has Persistent Cross Site Scripting (XSS) via the body e-mail body. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe.Show less
CVE-2017-17752 1Codecrafters 1Ability Mail Server May 13, 2026 Dec 20, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Ability Mail Server 3.3.2 has Cross Site Scripting (XSS) via the body of an e-mail message, with JavaScript code executed on the Read Mail screen (aka the /_readmail URI). This is fixed in version 4.2.4.