CVE-2023-40046

Summary

CVE-2023-40046 represents a SQL injection vulnerability in WS_FTP Server versions below 8.7.4 and 8.8.2. An attacker can exploit this flaw in the WS_FTP Server manager interface to gain insights into the database structure and content, and potentially execute malicious SQL statements to alter or delete database elements.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.