CVE-2020-37079: Wing FTP Server < 6.2.7 - Cross-site Request Forgery
Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery (CSRF) vulnerability in the web administration interface that allows attackers to delete admin users. Attackers can craft a malicious HTML page with a hidden form to submit a request that deletes the administrative user account without proper authorization.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-37079?
CVE-2020-37079 is classified as a medium severity vulnerability due to its ability to allow unauthorized deletion of admin users.
How do I fix CVE-2020-37079?
To fix CVE-2020-37079, upgrade Wing FTP Server to version 6.2.7 or later.
What type of vulnerability is CVE-2020-37079?
CVE-2020-37079 is a cross-site request forgery (CSRF) vulnerability that affects the web administration interface of Wing FTP Server.
What can attackers do with CVE-2020-37079?
Attackers can use CVE-2020-37079 to craft malicious pages that can delete admin users from the Wing FTP Server.
Which versions of Wing FTP Server are affected by CVE-2020-37079?
CVE-2020-37079 affects versions of Wing FTP Server prior to 6.2.7.