In WS_FTP Server version prior to 8.8.2, a stored cross-site scripting (XSS) vulnerability exists in WS_FTP Server's Management module. An attacker with administrative privileges could import a SSL certificate with malicious attributes containing cross-site scripting payloads. Once the cross-site scripting payload is successfully stored, an attacker could leverage this vulnerability to target WS_FTP Server admins with a specialized payload which results in the execution of malicious JavaScript within the context of the victims browser.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: ProgressSoftware
Published: 2023-09-27T14:50:55.329Z
Updated: 2024-08-02T18:24:54.832Z
Reserved: 2023-08-08T19:44:41.112Z
Link: CVE-2023-40047
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-09-27T15:18:58.820
Modified: 2023-09-27T19:58:58.307
Link: CVE-2023-40047
Redhat
No data.