CVEvulnerability

CVE-2020-11701

8.8 HIGH Published 2020-04-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-352

Description

An issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User Web Interface, as demonstrated by granting filesystem access to the public for uploading and deleting files and directories.

Affected configurations

• provideserver provide ftp server (<= 13.1)

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References