[{"CVE":"CVE-2018-10916","severity":"moderate","public_date":"2018-05-16T00:00:00Z","advisories":["RHSA-2020:1045"],"bugzilla":"1610349","bugzilla_description":"CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["lftp-0:4.4.8-12.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10916.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2010-2251","severity":"moderate","public_date":"2010-05-17T00:00:00Z","advisories":["RHSA-2010:0585"],"bugzilla":"591580","bugzilla_description":"CVE-2010-2251 lftp: multiple HTTP client download filename vulnerability [OCERT 2010-001]","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","CWE":null,"affected_packages":["lftp-0:3.7.11-4.el5_5.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2251.json"},{"CVE":"CVE-2007-2348","severity":"low","public_date":"2007-01-09T00:00:00Z","advisories":["RHSA-2009:1278"],"bugzilla":"236238","bugzilla_description":"CVE-2007-2348 lftp mirror --script does not escape names and targets of symbolic links","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["lftp-0:3.7.11-4.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2348.json"},{"CVE":"CVE-2003-0963","severity":"moderate","public_date":"2003-12-13T00:00:00Z","advisories":["RHSA-2003:403","RHSA-2003:404"],"bugzilla":"1617106","bugzilla_description":"CVE-2003-0963 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["lftp-0:2.6.3-5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0963.json"}]