Threats tagged 'ghsa-5j6f-7p5q-mphf'

CVE-2026-115341 is a vulnerability in the Thin Client Web Transfer component of Progress Software WS_FTP Server on Windows versions prior to 2025.0.5. It allows an authenticated FTP user to bypass intended access restrictions and access files outside their authorized scope. The vulnerability has a high severity with a CVSS score of 7.7, indicating a network attack vector with low complexity and no user interaction required. The impact is limited to confidentiality as it allows unauthorized file access without affecting integrity or availability.