ECHO-221d-cef9-d3f8
See a problem?- Import Source
- https://advisory.echohq.com/osv/ECHO-221d-cef9-d3f8.json
- JSON Data
- https://api.osv.dev/v1/vulns/ECHO-221d-cef9-d3f8
- Upstream
- Withdrawn
- 2026-04-12T13:58:47Z
- Published
- 2025-09-15T01:08:38Z
- Modified
- 2026-09-15T03:33:35Z
- Summary
- Disputed by upstream and documented in netrw documentation. The Netrw plugin stores credentials for an FTP session and sends those credentials when attempting to establish subsequent FTP sessions to servers on different hosts, which allows remote FTP servers to obtain sensitive information in opportunistic circumstances by logging usernames and passwords. https://security-tracker.debian.org/tracker/CVE-2008-4677
- Details
- References