The following table lists the changes that have been made to the
CVE-2025-32103 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.
-
CVE Modified
by [email protected]Apr. 15, 2025
Action Type Old Value New Value Added CVSS V3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N Added CWE CWE-40 Added Reference https://packetstorm.news/files/id/190460/ Removed Reference https://www.crushftp.com/download/ -
New CVE Received
by [email protected]Apr. 15, 2025
Action Type Old Value New Value Added Description CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files accessible by SMB at UNC share pathnames, bypassing SecurityManager restrictions. Added Reference https://seclists.org/fulldisclosure/2025/Apr/17 Added Reference https://www.crushftp.com/ Added Reference https://www.crushftp.com/download/