Vulnerability Database

308,379

Total vulnerabilities in the database

CVE-2023-40048

In WS_FTP Server version prior to 8.8.2,

the WS_FTP Server Manager interface was missing cross-site request forgery (CSRF) protection on a POST transaction corresponding to a WS_FTP Server administrative function.

  • Published: Sep 27, 2023
  • Updated: Nov 16, 2025
  • CVE: CVE-2023-40048
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H

CWEs:

Software From Fixed in
progress / ws_ftp_server - 8.8.2