{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "CrushFTP: CrushFTP Unprotected Alternate Channel Vulnerability · updates",
  "home_page_url": "https://pwn.watch/i/crushftp-cve-2025-54309",
  "feed_url": "https://pwn.watch/i/crushftp-cve-2025-54309/feed.json",
  "description": "CrushFTP contains an unprotected alternate channel vulnerability. When the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers to obtain admin access via HTTPS. Added to CISA KEV on 2025-07-22.",
  "language": "en",
  "_pwn": {
    "slug": "crushftp-cve-2025-54309",
    "severity": "critical",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/crushftp-cve-2025-54309/feed.xml",
    "llms": "https://pwn.watch/i/crushftp-cve-2025-54309/llms.txt",
    "json": "https://pwn.watch/i/crushftp-cve-2025-54309.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/crushftp-cve-2025-54309#2025-07-22-4be7a72d",
      "url": "https://pwn.watch/i/crushftp-cve-2025-54309#2025-07-22-4be7a72d",
      "title": "CrushFTP: CrushFTP Unprotected Alternate Channel Vulnerability: CISA added CVE-2025-54309 to the KEV catalog (due 2025-08-12).",
      "content_text": "CrushFTP: CrushFTP Unprotected Alternate Channel Vulnerability: CISA added CVE-2025-54309 to the KEV catalog (due 2025-08-12).",
      "date_published": "2025-07-22T00:00:00.000Z",
      "tags": [
        "critical"
      ]
    }
  ]
}