ID:11957 - Exploit for Improper authentication in CrushFTP - CVE-2025-54309

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to improper input validation in AS2 file transfer protocol. A remote attacker can obtain the administrator's session and gain unauthorized access to the server. 

Remediation