Описание
An issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User Web Interface, as demonstrated by granting filesystem access to the public for uploading and deleting files and directories.
Ссылки
- ExploitThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 13.1 (включая)
cpe:2.3:a:provideserver:provide_ftp_server:*:*:*:*:*:windows:*:*
EPSS
Процентиль: 44%
0.00216
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-352
Связанные уязвимости
github
больше 3 лет назад
An issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User Web Interface, as demonstrated by granting filesystem access to the public for uploading and deleting files and directories.
EPSS
Процентиль: 44%
0.00216
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-352