CWE-40

Universal Naming Convention (UNC) Path Injection in Cerberus FTP Server

A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against th…