Lucene search
PRIOn knowledge basePRION:CVE-2023-40045HistorySep 27, 2023 - 3:18 p.m.
Cross site scripting
2023-09-2715:18:00
PRIOn knowledge base
www.prio-n.com
5
ws_ftp server
versions
xss
vulnerability
ad hoc transfer
javascript
In WS_FTP Server versions prior to 8.7.4 and 8.8.2,
a reflected cross-site scripting (XSS) vulnerability exists in WS_FTP Server’s Ad Hoc Transfer module. An attacker could leverage this vulnerability to target WS_FTP Server users with a specialized payload which results in the execution of malicious JavaScript within the context of the victims browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ws_ftp_server | lt | 8.7.4 | |
| ws_ftp_server | ge | 8.8 | |
| ws_ftp_server | lt | 8.8.2 |
Related
cve
cve
CVE-2023-40045
2023-09-27 15:18:57
nvd
nvd
CVE-2023-40045
2023-09-27 15:18:57
cvelist
cvelist
nessus
nessus
Progress WS_FTP Server < 8.7.4, 8.8.0 < 8.8.2 Multiple Vulnerabilities
2023-10-04 00:00:00
rapid7blog
rapid7blog
Critical Vulnerabilities in WS_FTP Server
2023-09-29 13:33:05
thn
thn