Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2023-40048

WS_FTP Server Cross-Site Request Forgery (CSRF) Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

In WS_FTP Server version prior to 8.8.2, the WS_FTP Server Manager interface was missing cross-site request forgery (CSRF) protection on a POST transaction corresponding to a WS_FTP Server administrative function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Corporation WS_FTP Server

Default version status: affected

  • 8.8.0 to < 8.8.2affected

References