Comment by peterwwillis

That's.... dumb. It's not a vulnerability, it's a feature. The entire point of using FXP is to connect one server to another remote server. With FTP it was a "vulnerability" because people didn't expect users to send files or connect to random hosts, but with FXP it's the whole point of the protocol. (FTP bounce attacks have also been a solved issue for decades)