Servers and applications
CVE-2024-7744
In WS_FTP Server versions before 8.8.8 (2022.0.8), an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Web Transfer Module allows File Discovery, Probe System Files, User-Controlled Filename, Path Traversal. An authenticated file download flaw has been identified where a user can craft an API call that allows them to download a file from an…
- Severity
- Medium 6.5
- Published
- 28 Aug 2024
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 3 Nov 2026
- Fixed in
- 8.8.8
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
WS_FTP ServerServers and applications · cpe:a:progress:ws_ftp_server |
|