CVE-2024-52309

4 advisories.

Go/github.com/drakkan/sftpgo/v2 CVE-2024-52309: medium 5.1, EPSS 0.63%

SFTPGo allows administrators to restrict command execution from the EventManager

Action: Upgrade github.com/drakkan/sftpgo/v2 to 2.6.3 or later.

go get github.com/drakkan/sftpgo/v2@v2.6.3

introduced	fixed	last affected
2.4.0	2.6.3	-

2.6.3

CVE-2024-52309 · published 2024-11-21T23:19:07Z · modified 2024-12-02T18:04:00Z · JSON

SFTPGo allows administrators to restrict command execution from the EventManager

Action: Upgrade sftpgo to 2.6.3 or later.

go get sftpgo@v2.6.3

introduced	fixed	last affected
2.4.0	2.6.3	-

2.6.3

CVE-2024-52309 · published 2024-11-21T23:19:07Z · modified 2024-12-02T18:04:00Z · JSON

SFTPGo allows administrators to restrict command execution from the EventManager in github.com/drakkan/sftpgo

Action: No fix published. Pin and monitor.

introduced	fixed	last affected
0	-	-

No fixed version in the source.

CVE-2024-52309 · published 2024-11-21T19:52:49Z · modified 2026-03-03T04:56:01.517577Z · JSON

SFTPGo allows administrators to restrict command execution from the EventManager in github.com/drakkan/sftpgo

Action: Upgrade github.com/drakkan/sftpgo/v2 to 2.6.3 or later.

go get github.com/drakkan/sftpgo/v2@v2.6.3

introduced	fixed	last affected
2.4.0	2.6.3	-

2.6.3

CVE-2024-52309 · published 2024-11-21T19:52:49Z · modified 2026-03-03T04:56:01.517577Z · JSON