← Database

CVE-2022-36968

MEDIUM CVSS: 4.3 Published: 2022-08-02 Modified: 2026-06-17

Description

In Progress WS_FTP Server prior to version 8.7.3, forms within the administrative interface did not include a nonce to mitigate the risk of cross-site request forgery (CSRF) attacks.

Affected Platforms

Progress Ipswitch Ws Ftp Server

Weakness Type

CWE-352

References