Read the docs
TI-2020-04254 Aliases CVE-2020-5195GHSA-fvhj-87pc-qj64

Reflected XSS through an IMG element in Cerberus FTP Server prior to versions 11.0.1 and…

Priority LOW 30CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Reflected XSS through an IMG element in Cerberus FTP Server prior to versions 11.0.1 and 10.0.17 allows a remote attacker to execute arbitrary JavaScript or HTML via a crafted public folder URL. This occurs because of the folder_up.png IMG element not properly sanitizing user-inserted directory paths. The path modification must be done on a publicly shared folder for a remote attacker to insert arbitrary JavaScript or HTML. The vulnerability impacts anyone who clicks the malicious link crafted by the attacker.

Why it matters now

EPSS 0.01216 68th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:cerberusftp:ftp_server:*:*:*:*:enterprise:*:*:*10.0.0 to before 10.0.17; 11.0.0 to before 11.0.1VulnerableCerberusftp
  • cpe:2.3:a:cerberusftp:ftp_server:*:*:*:*:enterprise:*:*:* Versions 10.0.0 to before 10.0.17; 11.0.0 to before 11.0.1 Vulnerable ·Cerberusftp

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-5195
  2. 2026-10-03 Alias added: GHSA-fvhj-87pc-qj64

References

Advisory 3

  • TI-2026-05493 Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2 CVSS 4.0HIGH 7.3
  • TI-2017-04187 In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to… CVSS 3.0HIGH 7.5
  • TI-2020-04255 Cerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 allows an… CVSS 3.1HIGH 8.1
  • TI-2012-02602 Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in… CVSS 2.0MEDIUM 6.8
  • TI-2019-15186 The Web Client in Cerberus FTP Server Enterprise before 10.0.19 and 11.x before 11.0.4 allows XSS via an SVG document. CVSS 3.1MEDIUM 6.1
  • TI-2020-04253 The zip API endpoint in Cerberus FTP Server 8 allows an authenticated attacker without… CVSS 3.1MEDIUM 5.4
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences