Back to CVE Browser

CVE-2025-47813

🔥 Known Exploited (CISA KEV)MEDIUM

4.3

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-07-10

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.

Affected Platforms (CPE)

📦

Wftpserver

Wing Ftp Server

< 7.4.4

References & Advisories

🔗 https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2025-47813.txt

🔗 https://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/

🔗 https://www.wftpserver.com

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-47813

Related Vulnerabilities

The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL be...

CVE-2026-174582.1

A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser...

CVE-2026-174342.1

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-...

CVE-2026-174331.9

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file sr...