6.3Media
ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks
Erlang OTP
Server-Side Request Forgery (SSRF) vulnerability in Erlang/OTP ftp (ftp_internal module) allows FTP bounce attacks and SSRF via an unvalidated PASV response IP address. The ftp_internal:handle_ctrl_result/2 PASV handler (mode=passive, ipfamily=inet, ftp_exte…