CVE-2024-1474

Summary

CVE-2024-1474 is a newly disclosed vulnerability affecting WS_FTP Server versions prior to 8.8.5. This issue involves reflected cross-site scripting (XSS) on the administrative interface, which can be exploited by attackers when users access a malicious link. The XSS vulnerability allows attackers to inject and execute malicious scripts in the context of the targeted user, potentially leading to session hijacking, data theft, or other serious consequences. Successful exploitation requires the user to visit a specially crafted URL. It is strongly recommended that users upgrade to the latest version of WS_FTP Server to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.