CVE-2023-40048

Summary

CVE-2023-40048 is a vulnerability affecting WS_FTP Server versions prior to 8.8.2. This issue involves a lack of Cross-Site Request Forgery (CSRF) protection on a POST transaction in the WS_FTP Server Manager interface. An attacker could exploit this CSRF vulnerability by tricking an authenticated user into performing unintended administrative actions through specially crafted malicious requests. This could potentially lead to unauthorized modifications or even system compromise. It is important for organizations using WS_FTP Server to update to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.