An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Interface allows CSRF for actions such as: Change any username and password, admin ones included; Create/Delete users; Enable/Disable Services; Set a rogue update proxy; and Shutdown the server.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-04-12T02:43:29

Updated: 2024-08-04T11:35:13.775Z

Reserved: 2020-04-12T00:00:00

Link: CVE-2020-11706

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-04-12T03:15:11.070

Modified: 2024-11-21T04:58:26.747

Link: CVE-2020-11706

cve-icon Redhat

No data.