github.com/drakkan/sftpgo/v2
Fully featured and highly configurable SFTP server with optional FTP/S and WebDAV support.
Security Advisories for github.com/drakkan/sftpgo/v2 in go
Low
about 2 months ago
SFTPGo has stored XSS via inline parameter on public shares and user file download
go
github.com/drakkan/sftpgo/v2
Moderate
about 2 months ago
SFTPGo has path confinement bypass in public browsable share partial ZIP download
go
github.com/drakkan/sftpgo/v2
Moderate
5 months ago
SFTPGo improperly sanitizes placeholders in group home directories/key prefixes
go
github.com/drakkan/sftpgo/v2
Moderate
5 months ago
SFTPGo Vulnerable to Path Traversal and Permission Bypass via Path Normalization Discrepancy
go
github.com/drakkan/sftpgo, github.com/drakkan/sftpgo/v2
High
over 1 year ago
SFTPGo has insufficient sanitization of user provided rsync command
go
github.com/drakkan/sftpgo, github.com/drakkan/sftpgo/v2
Moderate
over 1 year ago
sftpgo vulnerable to brute force takeover of OpenID Connect session cookies
go
github.com/drakkan/sftpgo/v2
Moderate
over 1 year ago
SFTPGo allows administrators to restrict command execution from the EventManager
go
github.com/drakkan/sftpgo/v2
Moderate
about 2 years ago
SFTPGo has insufficient access control for password reset
go
github.com/drakkan/sftpgo/v2