Cerberusftp Ftp Server : Security vulnerabilities, CVEs csrf, cross site request forgery published in 2012

CVE-2012-2999

Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add a user account or (2) reconfigure the state of the FTP service, as demonstrated by a request to usermanager/users/modify.

Max CVSS

6.8

EPSS Score

0.15%

Published

2012-10-04

Updated

2013-02-07

1 vulnerabilities found

Cerberusftp » Ftp Server : Security Vulnerabilities, CVEs, Published In 2012 (CSRF)

CVE-2012-2999