CVE-2023-51713

make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

4.25% chance of exploitation in the next 30 days, 90th percentile

Nuclei

high · CWE-125

Published

2023-12-22

Updated

2025-11-03

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-51713.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2023-51698
• CVE-2023-51748
• CVE-2023-5167
• CVE-2023-51749
• CVE-2023-51664
• CVE-2023-51764