Vulnerabilities in drakkan
13 resultsCVE-2025-24366HIGHInsufficient sanitization of user provided rsync command in SFTPGoEPSS 0.7%CVE-2022-39220MEDIUMXSS Vulnerabilities in WebClientEPSS 0.6%CVE-2024-52309MEDIUMSFTPGo allows administrators to restrict command execution from the EventManagerEPSS 0.6%CVE-2026-30914MEDIUMSFTPGo has a Path Traversal and Permission Bypass via Path Normalization DiscrepancyEPSS 0.6%CVE-2022-36071HIGHRecovery codes abuse in SFTPGoEPSS 0.5%CVE-2026-49244MEDIUMSFTPGo: Path confinement bypass in public browsable share partial ZIP downloadEPSS 0.4%CVE-2024-52801MEDIUMBrute force takeover of OpenID Connect session cookies in sftpgoEPSS 0.4%CVE-2026-30915MEDIUMSFTPGo improperly sanitizes placeholders in group home directories/key prefixesEPSS 0.3%CVE-2024-37897MEDIUMInsufficient access control for password reset in sftpgoEPSS 0.3%CVE-2026-77375MEDIUMSFTPGo: Denial of service via malformed SSH channel requestEPSS 0.3%CVE-2026-49245LOWSFTPGo: Stored XSS via inline parameter on public shares and user file downloadEPSS 0.3%CVE-2026-103028MEDIUMSFTPGo source-side file-pattern filter bypass during copy operationsEPSS 0.2%CVE-2026-10031MEDIUMSFTPGo < 2.7.4 Permission Bypass via Symbolic Link CreationEPSS 0.2%