Progress Software Warns of Critical Vulnerability in WS_FTP Server

Multiple vulnerabilities have been discovered in Progress’s WS_FTP, which include .NET deserialization, directory traversal, reflected cross-site scripting (XSS), SQL injection, stored cross-site scripting, cross-site request forgery, and unauthenticated user enumeration vulnerability. These vulnerabilities’ severities range from 5.3 (Medium) to 10.0 (Critical). However, Progress has released patches for fixing these vulnerabilities in the WS_FTP server.  Moreover, […]

The post Progress Software Warns of Critical Vulnerability in WS_FTP Server appeared first on GBHackers - Latest Cyber Security News | Hacker News.

critical critical vulnerability cross-site cross-site request forgery deserialization directory directory traversal enumeration forgery injection medium patches progress progress software request scripting server software sql sql injection unauthenticated user enumeration vulnerabilities vulnerability ws_ftp xss