CVE-2020-5195

Reflected XSS through an IMG element in Cerberus FTP Server prior to versions 11.0.1 and 10.0.17 allows a remote attacker to execute arbitrary JavaScript or HTML via a crafted public folder URL. This occurs because of the folder_up.png IMG element not properly sanitizing user-inserted directory paths. The path modification must be done on a publicly shared folder for a remote attacker to insert arbitrary JavaScript or HTML. The vulnerability impacts anyone who clicks the malicious link crafted by the attacker.

• CWE-79

• https://support.cerberusftp.com/hc/en-us/community/topics/360000164199-AnnouncementsRelease Notes, Vendor Advisory
• https://www.cerberusftp.com/xss-vulnerability-in-public-shares-fixed-in-cerberus-ftp-server-version-11-0-1-and-10-0-17/Vendor Advisory
• https://www.doyler.net/security-not-included/cerberus-ftp-vulnerabilitiesThird Party Advisory
• https://support.cerberusftp.com/hc/en-us/community/topics/360000164199-AnnouncementsRelease Notes, Vendor Advisory
• https://www.cerberusftp.com/xss-vulnerability-in-public-shares-fixed-in-cerberus-ftp-server-version-11-0-1-and-10-0-17/Vendor Advisory
• https://www.doyler.net/security-not-included/cerberus-ftp-vulnerabilitiesThird Party Advisory

Published

Jan 13, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5187DNN (formerly DotNetNuke) through 9.4.4 allows Path Traversa…8.8
• CVE-2020-5188DNN (formerly DotNetNuke) through 9.4.4 has Insecure Permiss…6.5
• CVE-2020-5191PHPGurukul Hospital Management System in PHP v4.0 suffers fr…6.1
• CVE-2020-5192PHPGurukul Hospital Management System in PHP v4.0 suffers fr…8.8
• CVE-2020-5193PHPGurukul Hospital Management System in PHP v4.0 suffers fr…6.1
• CVE-2020-5194The zip API endpoint in Cerberus FTP Server 8 allows an auth…5.4
• CVE-2020-5196Cerberus FTP Server Enterprise Edition prior to versions 11.…8.1
• CVE-2020-5197An issue was discovered in GitLab Community Edition (CE) and…4.3
• CVE-2020-5200Minerbabe through V4.16 ships with SSH host keys baked into …5.9
• CVE-2020-5202apt-cacher-ng through 3.3 allows local users to obtain sensi…5.5
• CVE-2020-5203In Fat-Free Framework 3.7.1, attackers can achieve arbitrary…9.8
• CVE-2020-5204In uftpd before 2.11, there is a buffer overflow vulnerabili…8.8