All versions of Crush FTP are vulnerable

Saw this hasn't hit the hacker news or anything else yet, but received this notification from CrushFTP Support directly via a mass mailing.

>Please take immediate action to patch ASAP. A vulnerability was reported today (April 19th, 2024), and we patched it immediately. v10 version 10.71 is patched. v11 version 11.1.0 is patched. This vulnerability exists in the wild.


>The bottom line of this vulnerability is that any unauthenticated or authenticated user via the WebInterface could retrieve system files that …

action april crushftp cybersecurity ftp hacker notification patch support the hacker news today version vulnerability vulnerable