Known vulnerabilities in Monsta FTP

Vendor: Monsta
Software: Monsta FTP
Software CPE: cpe:2.3:a:monsta:monsta_ftp:*:*:*:*:*:*:*:*
Website: https://www.monstaftp.com/
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Monsta FTP Monsta FTP is affected by 4 known vulnerabilities: 2 high, 2 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118864 - Unrestricted Upload of File with Dangerous Type
CVE-2022-27468		 CWE-434 Medium
No
No
 2.11.3 01.12.2025 SB2025120140
#VU118863 - Server-Side Request Forgery (SSRF)
CVE-2022-27469		 CWE-918 High
No
No
 2.11.3 01.12.2025 SB2025120140
#VU118862 - Server-Side Request Forgery (SSRF)
CVE-2022-31827		 CWE-918 Medium
No
No
 2.11.3 01.12.2025 SB2025120140
#VU118861 - Server-Side Request Forgery (SSRF)
CVE-2025-34299		 CWE-918 High
Available
Exploited
 2.11.3 01.12.2025 SB2025120140