CVE-2024-0737

7.5 highEPSS 4.2%

High (7.5) in xlightftpd xlight ftp server. EPSS 4.2% chance of exploitation in the next 30 days.

A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251560.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-404
Published: 2024-01-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xlightftpd:xlight_ftp_server

References

https://packetstormsecurity.com/files/176553/LightFTP-1.1-Denial-Of-Service.html
https://vuldb.com/?ctiid.251560
https://vuldb.com/?id.251560
https://packetstormsecurity.com/files/176553/LightFTP-1.1-Denial-Of-Service.html
https://vuldb.com/?ctiid.251560

Check your stack JSON