CVE-2020-11706

An issue was discovered in ProVide (formerly zFTPServer) through 13.1

published April 12, 2020

CVSS
—
EPSS
0%
Percentile
41.6
In the wild
Unconfirmed
What it is

An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Interface allows CSRF for actions such as: Change any username and password, admin ones included; Create/Delete users; Enable/Disable Services; Set a rogue update proxy; and Shutdown the server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00496 · 41.6th percentile
Published
2020-04-12T02:43Z
EPSS history
Timeline
  • 12 APR 02:43Z
    An issue was discovered in ProVide (formerly zFTPServer) through 13.1
    cvelistv5