Monsta Limited of New Zealand vulnerabilities
We track 2 vulnerabilities in Monsta Limited of New Zealand products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 8, 2026.
2vulnerabilities
1critical
1high
0exploited
9.2average CVSS score
Latest Monsta Limited of New Zealand vulnerabilities
- 8.6 High severity
Monsta FTP: Server-Side Request Forgery
Monsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the fetchRemoteFile action caused by an incomplete IP blocklist check in the isBlockedIP() function, which fails to detect embedded IPv4 addresses within IPv4-mapped IPv6 addresse
- 9.8 Critical severity
Monsta FTP: Unrestricted Upload of File with Dangerous Type
Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitrary code by uploading a specially crafted file from a malicious (S)FTP server.