CVE-2023-40048

Опубликовано: 27 сент. 2023

Источник: nvd

CVSS3: 6.8

CVSS3: 6.5

EPSS Низкий

Описание

In WS_FTP Server version prior to 8.8.2,

the WS_FTP Server Manager interface was missing cross-site request forgery (CSRF) protection on a POST transaction corresponding to a WS_FTP Server administrative function.

Ссылки

https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023
Vendor Advisory
https://www.progress.com/ws_ftp
Product
https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023
Vendor Advisory
https://www.progress.com/ws_ftp
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:progress:ws_ftp_server:*:*:*:*:*:*:*:*

Версия до 8.8.2 (исключая)

EPSS

Процентиль: 67%

0.00548

Низкий

6.8 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

GHSA-hrhv-m8m9-xcpx

CVSS3: 6.8

github

больше 2 лет назад

In WS_FTP Server version 8.8.0 prior to 8.8.2, the WS_FTP Server Manager interface was missing cross-site request forgery (CSRF) protection on a POST transaction corresponding to a WS_FTP Server administrative function.

EPSS

Процентиль: 67%

0.00548

Низкий

6.8 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-352