CVE-2020-11703

CVE-2020-11703 describes an HTTP Response Splitting vulnerability in ProVide (formerly zFTPServer) up to version 13.1, exploitable via /ajax/GetInheritedProperties with the language parameter. The issue arises from insufficient input handling allowing CRLF-based splitting during response construc...

CVE-2020-11703: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue was discovered in ProVide formerly zFTPServer through 13.1. /ajax/GetInheritedProperties allows HTTP Response Splitting via the language parameter...

PT-2020-12790

Name of the Vulnerable Software and Affected Versions ProVide formerly zFTPServer versions through 13.1 Description An issue was discovered that allows HTTP Response Splitting via the language parameter in the "/ajax/GetInheritedProperties" API endpoint. Recommendations For ProVide versions throu...