Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qmgj-v6ph-pm4c

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User Web Interface, as demonstrated by granting filesystem access to the public for uploading and deleting files and directories.

An issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User Web Interface, as demonstrated by granting filesystem access to the public for uploading and deleting files and directories.

EPSS

Процентиль: 44%
0.00216
Низкий

Связанные уязвимости

CVSS3: 8.8
nvd
почти 6 лет назад

An issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User Web Interface, as demonstrated by granting filesystem access to the public for uploading and deleting files and directories.

EPSS

Процентиль: 44%
0.00216
Низкий