CVE-2020-15152

npm/ftp-srv CVE-2020-15152: critical 9.1

Server-Side Request Forgery in ftp-srv

Action: Upgrade ftp-srv to 2.19.6 or later.

npm i ftp-srv@2.19.6

npm i ftp-srv@3.1.2

npm i ftp-srv@4.3.4

Affected

Fixed versions

Sources

• osv: GHSA-jw37-5gqr-cf9j
• https://github.com/autovance/ftp-srv/security/advisories/GHSA-jw37-5gqr-cf9j
• https://nvd.nist.gov/vuln/detail/CVE-2020-15152
• https://github.com/autovance/ftp-srv/commit/5508c2346cf23b24c20070ff2e8a47c647d3d5b5
• https://github.com/autovance/ftp-srv/commit/e449e75219d918c400dec65b4b0759f60476abca
• https://github.com/autovance/ftp-srv/commit/fb32b012c3baf48ee804e1dc36544cbba70b00d3
• https://www.npmjs.com/advisories/1445
• https://www.npmjs.com/package/ftp-srv

CVE-2020-15152 · published 2020-08-17T21:44:54Z · modified 2026-09-10T03:48:51.656866510Z · JSON