Fetch Softworks Fetch FTP Client 5.8.2 Remote CPU Consumption Denial of Service

Advisories

severity: high
date: December 30, 2025
Affecting: Fetch Softworks Fetch FTP Client 5.8
CVE: CVE-2022-50799
CWE: CWE-770 Allocation of Resources Without Limits or Throttling
CVSS: 7.1
CVSS V4 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
References: ExploitDB-50696
Fetch Softworks Product Homepage
Zero Science Lab Disclosure (ZSL-2022-5696)
Credit: LiquidWorm as Gjoko Krstic of Zero Science Lab
Description: Fetch FTP Client 5.8.2 contains a denial of service vulnerability that allows attackers to trigger 100% CPU consumption by sending long server responses. Attackers can send specially crafted FTP server responses exceeding 2K bytes to cause excessive resource utilization and potentially crash the application.