CVE-2025-34110 – ColoradoFTP Server Directory Traversal Vulnerability

CVE ID : CVE-2025-34110

Published : July 15, 2025, 1:15 p.m. | 1 hour, 17 minutes ago

Description : A directory traversal vulnerability exists in ColoradoFTP Server ≤ 1.3 Build 8 for Windows, allowing unauthenticated attackers to read or write arbitrary files outside the configured FTP root directory. The flaw is due to insufficient sanitation of user-supplied file paths in the FTP GET and PUT command handlers. Exploitation is possible by submitting traversal sequences during FTP operations, enabling access to system-sensitive files. This issue affects only the Windows version of ColoradoFTP.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…