CVE-2022-22836

CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request.

Date published : 2022-01-08

http://www.coreftp.com/forums/viewtopic.php?f=15&t=4022509

https://yoursecuritybores.me/coreftp-vulnerabilities/