medium6.1
CVE-2020-11704
An issue was discovered in ProVide (formerly zFTPServer) through 13.1.
Impact
An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Web Interface has Multiple Stored and Reflected XSS. GetInheritedProperties is Reflected via the groups parameter. GetUserInfo is Reflected via POST data. SetUserInfo is Stored via the general parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Provideserver | Provide Ftp Server | through 13.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Multiple%20Cross-Site-Scripting
- https://www.provideserver.com/security/
- https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Multiple%20Cross-Site-Scripting
- https://www.provideserver.com/security/