Vulnerabilities fixed in WS_FTP

🗓️ 29 Sep 2023 00:00:00Reported by NCSCType

Progress fixed WS_FTP vulnerabilities enabling code execution and data manipulation in Ad Hoc Transfer.

Reporter	Title	Published	Views	Family All 112
zdt	Progress Software WS_FTP Unauthenticated Remote Code Execution Exploit	4 Oct 202300:00	–	zdt
GithubExploit	Exploit for Cross-site Scripting in Progress Ws_Ftp_Server	23 Mar 202214:20	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Progress Ws_Ftp_Server	2 Oct 202314:55	–	githubexploit
attackerkb	CVE-2022-27665	3 Apr 202314:15	–	attackerkb
attackerkb	CVE-2023-40044	27 Sep 202300:00	–	attackerkb
BDU FSTEC	The vulnerability of the Ad hoc Transfer Module of the WS_FTP Server allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.	6 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WS_FTP Server server, related to incorrect path name restrictions for the restricted access directory, allows attackers to circumvent security restrictions, gain unauthorized read, modify, or delete access to data, and execute arbitrary commands.	10 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WS_FTP Server server control module allows attackers to perform cross-site scripting attacks.	17 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Ad Hoc Transfer module of the WS_FTP Server allows attackers to carry out cross-site scripting attacks.	17 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WS_FTP Server server lies in the lack of validation for XML objects’ sequences, which allows an attacker to gain access to read and modify the database.	28 Oct 202300:00	–	bdu_fstec