[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3SbrHg6DRnimsbR4KZB136WajSnstdLi8gAlrhK2a3w":3,"g5a-risk:CVE-2023-43177":114},{"success":4,"data":5,"meta":111},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":29,"epssPercentile":26,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":37,"references":38,"referencesCount":49,"weaknesses":50,"weaknessesCount":37,"isActivelyExploited":59,"cisaInfo":26,"otxData":26,"relatedBlogPosts":60,"seoMetadata":61,"configurations":86,"relatedVendorCves":95,"notableEvents":96},"CVE-2023-43177","What is CVE-2023-43177?","CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes.","2023-11-18T00:15:07.073","2023-11-29T20:52:51.427",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":24,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,0.81801,[29,29,29,29,29,29,29],"Critical",[33],{"vendor":34,"product":34,"version":35,"criteria":36,"vulnerable":4},"crushftp","*","cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*",1,[39,45],{"url":40,"source":41,"tags":42},"https:\u002F\u002Fconvergetp.com\u002F2023\u002F11\u002F16\u002Fcrushftp-zero-day-cve-2023-43177-discovered\u002F","Convergetp",[43,44],"Exploit","Third Party Advisory",{"url":46,"source":47,"tags":48},"https:\u002F\u002Fgithub.com\u002Fthe-emmons\u002FCVE-Disclosures\u002Fblob\u002Fmain\u002FPending\u002FCrushFTP-2023-1.md","GitHub",[44],2,[51],{"id":52,"name":53,"description":54,"extendedDescription":55,"status":56,"abstraction":57,"structure":58},"CWE-913","Improper Control of Dynamically-Managed Code Resources","The product does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.","Many languages offer powerful features that allow the programmer to dynamically create or modify existing code, or resources used by code such as variables and objects. While these features can offer significant flexibility and reduce development time, they can be extremely dangerous if attackers can directly influence these code resources in unexpected ways.","Incomplete","Class","Simple",false,[],{"title":62,"metaDescription":63,"keywords":64,"canonicalUrl":65,"structuredData":66},"What is CVE-2023-43177? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-43177, a critical severity cyber security vulnerability from 2023. High exploit probability (81.8%). CrushFTP prior to 10....","CVE-2023-43177, CVE-2023-43177 vulnerability, CVE-2023-43177 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, crushftp security, crushftp vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2023-43177",{"@context":67,"@type":68,"headline":62,"description":63,"datePublished":9,"dateModified":10,"author":69,"publisher":73,"about":77,"mainEntityOfPage":81,"articleSection":84,"keywords":85},"https:\u002F\u002Fschema.org","TechArticle",{"@type":70,"name":71,"url":72},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":70,"name":71,"url":72,"logo":74},{"@type":75,"url":76},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":78,"name":6,"description":79,"additionalType":80},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":82,"@id":83},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-43177","Cybersecurity","CVE-2023-43177, CVE-2023-43177 vulnerability, CVE-2023-43177 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[87],{"Operator":26,"Negate":26,"Nodes":88},[89],{"Operator":90,"Negate":26,"CPEMatch":91},"OR",[92],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":93,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":94,"VersionEndIncluding":26},"531E55E7-8536-4BD4-BE16-38C91C69052C","10.5.2",[],[97,104],{"id":98,"eventType":99,"eventTime":100,"details":101,"label":102,"color":103},"6535a4d5-26c1-44ad-9dac-08f697289c66","LOW_EPSS_DELTA","2025-06-11T10:10:14.168474+00:00","Daily EPSS score decreased by 0.189 on 2023-12-30","EPSS Score Decreased","green",{"id":105,"eventType":106,"eventTime":107,"details":108,"label":109,"color":110},"13b2ae58-c207-41ff-9a8e-07e203c5c7d7","HIGH_EPSS_DELTA","2025-11-19T04:05:08.488345+00:00","Daily EPSS score increased by 0.125 on 2023-12-30","EPSS Score Increased","red",{"lastModified":10,"cacheTime":112,"version":113},1792249092939,"2.0",{"score":115,"band":31,"action":116,"scoredAt":117},90,"Emergency patch","2026-10-16T06:59:52.773067+00:00"]