CVE-2023-40047

Summary

CVE-2023-40047 is a stored cross-site scripting (XSS) vulnerability affecting WS_FTP Server versions before 8.8.2. An attacker with administrative privileges can exploit this issue by importing a malicious SSL certificate into the system. The certificate contains cross-site scripting payloads that are stored in the WS_FTP Server's Management module. Once the payload is successfully stored, the attacker can leverage this vulnerability to execute malicious JavaScript within the context of the victims browser, targeting WS_FTP Server administrators.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.