UpHeron
All vulnerabilities

Servers and applications

CVE-2023-42657

In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a directory traversal vulnerability was discovered.  An attacker could leverage this vulnerability to perform file operations (delete, rename, rmdir, mkdir) on files and folders outside of their authorized WS_FTP folder path.  Attackers could also escape the context of the WS_FTP Server file structure and perform the same level of operations…

Severity
Critical 9.6
Published
27 Sept 2023
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
8.7.4, 8.8.2
Sources
NVD

Affected software

SoftwareAffected versions
WS_FTP ServerServers and applications · cpe:a:progress:ws_ftp_server
  • Every version before 8.7.4
  • From 8.8.0 before 8.8.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-42657
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-42657