Exploit for CrushFTP RCE chain released, patch now

A proof-of-concept exploit was publicly released for a critical remote code execution vulnerability in the CrushFTP enterprise suite, allowing unauthenticated attackers to access files on the server, execute code, and obtain plain-text passwords. [...]

access attackers code code execution concept critical crushftp enterprise exploit files passwords patch proof proof-of-concept rce remote code remote code execution security server text unauthenticated vulnerability