CVE-2023-24029: Progress WS_FTP Server

High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days.

In Progress WS_FTP Server before 8.8, it is possible for a host administrator to elevate their privileges via the administrative interface due to insufficient authorization controls applied on user modification workflows.

Affected products

• Progress WS_FTP Server: before 8.8 (fixed in 8.8)

Published 2023-02-03. Last modified 2026-06-17.