CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes.
The product does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Crushftp | Crushftp | * | 10.5.2 (excluding) |