Summary: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/GetInheritedProperties allows HTTP Response Splitting via the language parameter.Published: Sunday, April 12, 2020 - 03:15cvss: 5.0