CVE-2025-47813

MediumKnown Exploited

loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the…

mitre·CWE-209·Published 2025-07-10

CVSS

4.3

EPSS

0.56

KEV

Yes

Exploits

cve.orgen

149 chars

loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.

NVDen

149 chars

loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.

loginok.html en Wing FTP Server anterior a 7.4.4 revela la ruta de instalación local completa de la aplicación cuando se utiliza un valor largo en la cookie UID.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	4.3	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
3.1	Primary	cve.org	4.3	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
3.1	Secondary	NVD	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N