Add new attachment

Only authorized users are allowed to upload new attachments.

This page (revision-15) was last changed on 19-Jul-2025 00:17 by Sandor

This page was created on 18-Jul-2025 11:17 by Ben Spink

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Difference between version and

At line 3 changed one line
Hackers apparently reverse engineered out code and found some bug we had, which we had already fixed, and are exploiting it for anyone who has not stayed up to date.
Hackers apparently reverse engineered our code and found some bug we had, which we had already fixed, and are exploiting it for anyone who has not stayed up to date.
At line 5 changed one line
We believe this bug was in builds prior to July 1st time period roughly...we are not fully certain of the exact bug that is being exploited, but it appears the latest versions of CrushFTP already have the issue patched.
We believe this bug was in builds prior to July 1st time period roughly...we are not fully certain of the exact bug that is being exploited, but it appears the latest versions of CrushFTP already have the issue patched. The attack vector was HTTP(S) for how they could exploit the server.
At line 17 added 6 lines
!!Future mitigation techniques:
Limit IPs allowed for administration
Whitelist IPs that can connect to your server
Enterprise users use a DMZ Crush instance in front
Allow automatic and frequent patching.
Version Date Modified Size Author Changes ... Change note
15 19-Jul-2025 00:17 2.674 kB Sandor to previous
14 18-Jul-2025 16:56 2.566 kB Ben Spink to previous | to last
13 18-Jul-2025 14:56 2.133 kB Ben Spink to previous | to last
12 18-Jul-2025 14:34 2.119 kB Ben Spink to previous | to last
11 18-Jul-2025 14:11 2.166 kB Ben Spink to previous | to last
10 18-Jul-2025 14:09 2.014 kB Ben Spink to previous | to last
9 18-Jul-2025 13:43 1.583 kB Ben Spink to previous | to last
8 18-Jul-2025 13:11 1.513 kB Ben Spink to previous | to last
7 18-Jul-2025 13:10 1.507 kB Ben Spink to previous | to last
6 18-Jul-2025 12:30 1.416 kB Ben Spink to previous | to last
5 18-Jul-2025 12:11 1.325 kB Ben Spink to previous | to last
4 18-Jul-2025 11:39 1.224 kB Ben Spink to previous | to last
3 18-Jul-2025 11:38 1.217 kB Ben Spink to previous | to last
2 18-Jul-2025 11:33 0.935 kB Ben Spink to previous | to last
1 18-Jul-2025 11:17 0.592 kB Ben Spink to last
« This page (revision-15) was last changed on 19-Jul-2025 00:17 by Sandor
G’day (anonymous guest)
CrushFTP11 | What's New

Referenced by
Update

JSPWiki