CVE-2023-40044 (published 2023-09-27T14:48:08.190Z)

In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.  


Affected products: Vendor: Progress Software Corporation
Product: WS_FTP Server
Versions: 8.8.0, 8.7.0