Actively exploited · Published Jul 10, 2025 · Assigned by mitre
CVE-2025-47813
Medium 4.3 Exploited
In plain English
A medium-severity security flaw in Wing FTP Server from wftpserver. Attackers are actively exploiting it in the wild (listed by CISA on March 16, 2026). The chance it is exploited in the next 30 days is estimated at 62.5% (higher than 99.2% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA guidance
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Mar 30, 2026.
Official description
loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| wftpserver | Wing FTP Server | 0 – before 7.4.4 |
Weakness: CWE-209 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N