Skip to content
OpenAdvisories
High · 7.7 CVE-2026-115341 EUVD-2026-120112GHSA-5j6f-7p5q-mphf

Unauthorized File Disclosure via Path Traversal in Thin Client Web Transfer in Progress WS_FTP Server

Published Nov 9, 2026 · Updated Nov 9, 2026 · Assigned by ProgressSoftware

Vendor: Progress Software Product: WS_FTP Server

Description

Improper access restrictions in the Thin Client Web Transfer component of Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows could allow an authenticated FTP user to access files outside their intended scope.

Affected products

VendorProductAffectedFixed
Progress Software WS_FTP Server < 2025.0.5 2025.0.5

Advisories 1

References