In WS_FTP Server versions prior to 8.7.4 and 8.8.2,
a reflected cross-site scripting (XSS) vulnerability exists in WS_FTP Server's Ad Hoc Transfer module. An attacker could leverage this vulnerability to target WS_FTP Server users with a specialized payload which results in the execution of malicious JavaScript within the context of the victims browser.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: ProgressSoftware
Published: 2023-09-27T14:49:45.334Z
Updated: 2024-08-02T18:24:55.526Z
Reserved: 2023-08-08T19:44:41.112Z
Link: CVE-2023-40045
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-09-27T15:18:57.897
Modified: 2023-09-27T19:24:47.143
Link: CVE-2023-40045
Redhat
No data.