Vulnerability · Published Sep 27, 2023 · Assigned by ProgressSoftware

CVE-2023-42657WS_FTP Server Directory Traversal

Critical 9.9

In plain English

A critical-severity path traversal in WS_FTP Server from Progress Software Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 16.0% (higher than 97% of all known vulnerabilities).

Severity (CVSS 3.1)9.9Critical

Exploit odds (30 days)16.0%top 3.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a directory traversal vulnerability was discovered. An attacker could leverage this vulnerability to perform file operations (delete, rename, rmdir, mkdir) on files and folders outside of their authorized WS_FTP folder path. Attackers could also escape the context of the WS_FTP Server file structure and perform the same level of operations (delete, rename, rmdir, mkdir) on file and folder locations on the underlying operating system.

Affected products (as reported)

Vendor	Product	Versions
Progress Software Corporation	WS_FTP Server	8.8.0 – before 8.8.28.7.0 – before 8.7.4

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

https://www.progress.com/ws_ftp product
https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023 vendor-advisory