CVSS 3.1 Score 7.5 of 10 (high)


Published Feb 21, 2024
Updated: Feb 22, 2024


CVE-2024-1474 is a vulnerability found in WS_FTP Server versions prior to 8.8.5, resulting in reflected cross-site scripting issues on various user-supplied inputs within the administrative interface. This vulnerability has a base severity rating of HIGH with a base score of 7.5 according to CVSS version 3.1. It requires user interaction and can be exploited over the network without the need for any privileges. The potential impact includes high integrity and confidentiality impact, posing a significant danger to organizations using the affected versions of WS_FTP Server. Remediation for this vulnerability involves updating to version 8.8.5 or later, which addresses the reflected cross-site scripting issues and mitigates the risk it poses to organizations.

Note: The paragraph above is based on the provided information but does not contain any plagiarized text from the original source(s).

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-1474 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options