CVE-2025-47813 Wftpserver Wing FTP Server
loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.
- CVSS
- 4.3 Medium
- EPSS
- 63%
- Percentile
- 99
- Published
- 2025-07-10
- Force
- 8 of 12
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
On CISA’s exploited list
Wing FTP Server Information Disclosure Vulnerability
- Added
- 2026-03-16
- Federal patch deadline
- 2026-03-30
- Ransomware use
- not known