medium6.1Public exploit code
CVE-2019-25046
The Web Client in Cerberus FTP Server Enterprise before 10.0.19 and 11.x before 11.0.4 allows XSS via an SVG document.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cerberus FTP Web Service 11 - 'svg' Stored Cross-Site Scripting (XSS)2021-06-11 · webapps · multiple
Impact
The Web Client in Cerberus FTP Server Enterprise before 10.0.19 and 11.x before 11.0.4 allows XSS via an SVG document.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cerberusftp | Ftp Server | before 10.0.19 from 11.0.0 before 11.0.4 |