CVE-2022-36967

CVE-2022-36967 affects Progress WS_FTP Server versions prior to 8.7.3. The administrative web interface contains multiple reflected XSS vulnerabilities that allow a remote attacker to inject arbitrary JavaScript into a WS_FTP administrator’s web session, enabling code execution in the victim’s br...

CVE-2022-36968

Progress WS_FTP Server prior to version 8.7.3 is affected by a CSRF vulnerability due to admin forms lacking a nonce. The issue is tied to the web administration interface and could enable cross-site request forgery. Affected products: WS_FTP Server