CVE:CVE-2022-22836
CNNVD:CNNVD-202201-642
Core FTP是一款文件传输服务器。
Core FTP Server 727之前存在安全漏洞，该漏洞允许经过身份验证的攻击者在 HTTP PUT 请求中通过 ../ 进行目录遍历（用于文件创建）。
solution:Upgrade coreftp core_ftp to a higher version than 1.2,2.0:build_639,2.0:build_640,2.0:build_641,2.0:build_642,2.0:build_645,2.0:build_647,2.0:build_649,2.0:build_651,2.0:build_653,2.0:build_655,2.0:build_656,2.0:build_657,2.0:build_658,2.0:build_659,2.0:build_665,2.0:build_667,2.0:build_668,2.0:build_671,2.0:build_673,2.0:build_674,2.0:build_676,2.0:build_677,2.0:build_679,2.0:build_682,2.0:build_687,2.0:build_689,2.0:build_691,2.0:build_694,2.0:build_695,2.0:build_697,2.0:build_699,2.0:build_702,2.0:build_704,2.0:build_705,2.0:build_711,2.0:build_713,2.0:build_715,2.0:build_719,2.0:build_725,and avoid the version (,1.2],2.0:build_639,2.0:build_640,2.0:build_641,2.0:build_642,2.0:build_645,2.0:build_647,2.0:build_649,2.0:build_651,2.0:build_653,2.0:build_655,2.0:build_656,2.0:build_657,2.0:build_658,2.0:build_659,2.0:build_665,2.0:build_667,2.0:build_668,2.0:build_671,2.0:build_673,2.0:build_674,2.0:build_676,2.0:build_677,2.0:build_679,2.0:build_682,2.0:build_687,2.0:build_689,2.0:build_691,2.0:build_694,2.0:build_695,2.0:build_697,2.0:build_699,2.0:build_702,2.0:build_704,2.0:build_705,2.0:build_711,2.0:build_713,2.0:build_715,2.0:build_719,2.0:build_725