In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.
id: CVE-2023-40044
info:
name: WS_FTP Server - Insecure Deserialization
author: 0x_Akoko
seve
...