CVE-2023-40044

Publication date

2023-09-27 14:48:08

Family

ProgressSoftware

State

PUBLISHED

Description

In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.