CVE-2023-42659

Published: 2023-11-07T16:15Z

Last Modified: 2024-11-21T08:22Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

In WS_FTP Server versions prior to 8.7.6 and 8.8.4, an unrestricted file upload flaw has been identified. An authenticated Ad Hoc Transfer user has the ability to craft an API call which allows them to upload a file to a specified location on the underlying operating system hosting the WS_FTP Server application. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt