Description (CNA)
loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| wftpserver / Wing FTP Server | affected 0 before 7.4.4 |
CWE
CWE-209
References
- https://www.wftpserver.com
- https://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/
- https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2025-47813.txt
ADP enrichment
No English description supplied.