CVE-2023-42659

概要

参考情報

• community.progress.com/s/article/WS-FTP-Server-Service-Pack-November-2023 · Vendor Advisory
• progress.com/ws_ftp · Product

ws ftp server のその他の脆弱性

• CVE-2024-7745高 8.1In WS_FTP Server versions before 8.8.8 (2022.0.8), a Missing Critical Step in Multi-Factor Authentication of the Web Transfer Module allows …
• CVE-2024-7744中 6.5In WS_FTP Server versions before 8.8.8 (2022.0.8), an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnera…
• CVE-2024-1474中 6.1In WS_FTP Server versions before 8.8.5, reflected cross-site scripting issues have been identified on various user supplied inputs on the WS…
• CVE-2023-42657緊急 9.6 In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a directory traversal vulnerability was discovered.  An attacker could leverage this …
• CVE-2023-40049中 5.3 In WS_FTP Server version prior to 8.8.2, an unauthenticated user could enumerate files under the 'WebServiceHost' directory listing.