CVE-2019-12815

CRITICAL 9.8EPSS 57.6%

An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.

CVSS v3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 57.61% chance of exploitation in the next 30 days, 99th percentile
Published: 2019-07-19
Updated: 2025-11-04

Proof-of-concept exploits (2)

KTN1990/CVE-2019-128156★ · 2019-09-24
lcartey/proftpd-cve-2019-128150★ · 2020-08-25

References

Related