| Package | Affected versions | Patched versions |
|---|---|---|
| provide ftp server | ≤ 13.1 |
An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/ImportCertificate allows an attacker to load an arbitrary certificate in .pfx format or overwrite arbitrary files via the fileName parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free