CrushFTP < 11.3.1 認証バイパス (CVE-2025-31161) (直接チェック)

critical Nessus プラグイン ID 233965

バージョン 1.10

Oct 27, 2025, 3:15 PM

  • Logic Changes (Gate HTTP debugging behind hidden preference)

Plugin Feed: 202510271515

バージョン 1.9

Oct 23, 2025, 3:11 AM

  • Logic Changes (Fix HTTP/1 library to make sure it closes unused Keep-Alive connections)

Plugin Feed: 202510230311

バージョン 1.7

Oct 16, 2025, 4:39 PM

  • Logic Changes (Implement workaround in HTTP library to prevent triggering an engine bug.)

Plugin Feed: 202510161639

バージョン 1.5

Oct 1, 2025, 9:12 PM

  • Logic Changes (Adding support for user-supplied header added to all HTTP requests.)

Plugin Feed: 202510012112

バージョン 1.4

Sep 30, 2025, 12:41 AM

  • Logic Changes (Add extra checks to see whether plugins should run. Modernisation of the HTTP/1 library. Various corrections and fixes for CPE related Flatline Test Failures. Remove spurious authentication header.)

Plugin Feed: 202509300041

バージョン 1.3

Jul 15, 2025, 2:39 AM

  • Logic Changes

Plugin Feed: 202507150239

バージョン 1.2

Apr 8, 2025, 2:17 PM

  • CISA reference
  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C")
  • Exploit attributes ("Exploit available" set to "True")
  • Exploit attributes ("Exploitability ease" set to "Exploits are available")
  • CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C")

Plugin Feed: 202504081417

バージョン 1.1

Apr 7, 2025, 9:51 PM

  • New

Plugin Feed: 202504072151

* Changelogs are generally available for changes made after Nov 1, 2022