CVE-2020-11703

CVE-2020-11703 describes an HTTP Response Splitting vulnerability in ProVide (formerly zFTPServer) up to version 13.1, exploitable via /ajax/GetInheritedProperties with the language parameter. The issue arises from insufficient input handling allowing CRLF-based splitting during response construc...

CVE-2020-11703: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue was discovered in ProVide formerly zFTPServer through 13.1. /ajax/GetInheritedProperties allows HTTP Response Splitting via the language parameter...