Unscored CVE-2020-11703 EUVD-2020-4045GHSA-8qhf-pcp9-49xc

An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/GetInheritedProperties allows HTTP Response Splitting via the …

Published Apr 12, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/GetInheritedProperties allows HTTP Response Splitting via the language parameter.

References

https://www.provideserver.com/security/
https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20User%20Interface%20-%20HTTP%20Response%20Splitting