Organizations using Progress Software’s enterprise-grade WS_FTP Server secure file transfer software have been urged to immediately remediate a maximum severity vulnerability, which has been fixed along with other bugs as part of a security update, reports BleepingComputer. Threat actors could leverage the maximum severity flaw, tracked as CVE-2023-40044, to facilitate remote command execution, while the other critical vulnerability, tracked as CVE-2023-42657, could be exploited to enable file operations outside the permitted folder path.

Source: SC Magazine