CVE-2023-40048 (published 2023-09-27T14:51:35.413Z)



In WS_FTP Server version prior to 8.8.2,

 the WS_FTP Server Manager interface was missing cross-site request forgery (CSRF) protection on a POST transaction corresponding to a WS_FTP Server administrative function.
Affected products: Vendor: Progress Software Corporation
Product: WS_FTP Server
Versions: 8.8.0