CVE-2021-31810

CVE-2021-31810

An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP server can use the PASV response to trick Net::FTP into connecting back to a given IP address and port. This potentially makes curl extract information about services that are otherwise private and not disclosed (e.g., the attacker can conduct port scans and service banner extractions).

Source: CVE-2021-31810

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다