sftpgo vulnerabilities

Products

• sftpgo 1

Latest sftpgo CVEs

Newest publication first

1. CVE-2024-52309 SFTPGo allows administrators to restrict command execution from the EventManager

   Published 2024-11-21

   Medium·CVSS 5.1 EPSS 0.63%

   SFTPGo is a full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob. One powerful feature of SFTPGo is the ability to have the EventManager execute scripts or run applications in response to certain events. This feature i...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.