CVE-2022-22836: Coreftp Core FTP

Medium severity, CVSS 6.5. EPSS: 5.4% chance of exploitation in the next 30 days.

CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request.

Affected products

• Coreftp Core FTP: up to and including 1.2; version 2.0 only

Published 2022-01-10. Last modified 2026-06-17.