CVE-2020-5194

The zip API endpoint in Cerberus FTP Server 8 allows an authenticated attacker without zip permission to use the zip functionality via an unrestricted API endpoint. Improper permission verification occurs when calling the file/ajaxdownloadzip/zipname endpoint. The result is that a user without...

CVE-2020-5194

The zip API endpoint in Cerberus FTP Server 8 allows an authenticated attacker without zip permission to use the zip functionality via an unrestricted API endpoint. Improper permission verification occurs when calling the file/ajaxdownloadzip/zipname endpoint. The result is that a user without...

PT-2020-18295

Name of the Vulnerable Software and Affected Versions Cerberus FTP Server version 8 Description The issue concerns improper permission verification in the zip API endpoint, allowing an authenticated attacker without zip permission to utilize the zip functionality. This occurs when calling the...