ColoradoFTP vulnerabilities
We track 1 vulnerability in ColoradoFTP products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 15, 2025.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest ColoradoFTP vulnerabilities
- 9.3 Critical severity
Server: Improper Limitation of a Pathname to a Restricted Directory
A directory traversal vulnerability exists in ColoradoFTP Server ≤ 1.3 Build 8 for Windows, allowing unauthenticated attackers to read or write arbitrary files outside the configured FTP root directory. The flaw is due to insufficient sanitation of user-suppli