Affected by GO-2022-0964
and 7 other vulnerabilities
GO-2022-0964: SFTPGo vulnerable to recovery codes abuse in github.com/drakkan/sftpgo
GO-2022-1015: SFTPGo WebClient vulnerable to Cross-site Scripting in github.com/drakkan/sftpgo
GO-2024-2940: SFTPGo has insufficient access control for password reset in github.com/drakkan/sftpgo
GO-2024-3283: SFTPGo allows administrators to restrict command execution from the EventManager in github.com/drakkan/sftpgo
GO-2024-3300: sftpgo vulnerable to brute force takeover of OpenID Connect session cookies in github.com/drakkan/sftpgo
GO-2025-3458: SFTPGo has insufficient sanitization of user provided rsync command in github.com/drakkan/sftpgo
GO-2026-4697: SFTPGo improperly sanitizes placeholders in group home directories/key prefixes in github.com/drakkan/sftpgo
GO-2026-4699: SFTPGo Vulnerable to Path Traversal and Permission Bypass via Path Normalization Discrepancy in github.com/drakkan/sftpgo

The highest tagged major version is
v2.
package
Version:
v1.0.0
Opens a new window with list of versions in this module.
Published: Jul 6, 2020
License: GPL-3.0
Opens a new window with license information.
Imports: 17
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
¶
Package service allows to start and stop the SFTPGo service
Service defines the SFTPGo service
Start initializes the service
func (s *Service) StartPortableMode(sftpdPort int, enabledSSHCommands []string, advertiseService, advertiseCredentials bool) error
StartPortableMode starts the service in portable mode
Stop terminates the service unblocking the Wait method
Wait blocks until the service exits
Source Files
¶
Click to show internal directories.
Click to hide internal directories.