Threats tagged 'ghsa-gpxj-xcv2-8mhf'

A missing authorization vulnerability exists in the administrative interface of Progress Software WS_FTP Server on Windows versions prior to 2024.0.7 and 2025.0.4. This flaw allows a delegated Host Administrator to perform actions beyond their authorized scope, potentially leading to arbitrary command execution with elevated privileges and full compromise of the server.