CVE-2025-47813
loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the...
loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.
- Record
CVE-2025-47813- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-209
- Updated
- 2026-11-02
EUVDEUVD-2025-21020
loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.
- Record
EUVD-2025-21020- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-2vvg-j984-hh8p
loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the...
loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.
- Record
GHSA-2vvg-j984-hh8p- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-209
- Updated
- 2026-11-02
CISA KEV No score
Wing FTP Server Information Disclosure Vulnerability
Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in the UID cookie.
- Record
CVE-2025-47813- Weakness
- CWE-209
- Updated
- 2026-11-02
NVD
loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.
- Record
CVE-2025-47813- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-209
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Nuclei | Wing FTP Server <= 7.4.3 - Path Disclosure via Overlong UID Cookie |
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation | ||
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, Nuclei, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-47813 is a medium vulnerability (CVSS 4.3) in Wftpserver Wing Ftp Server, published July 10, 2025. CISA lists it as known to be exploited, since March 16, 2026. EUVD reports exploitation since March 16, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 62.5%, the 99th percentile. No source names a fixed version.
References
wftpserver.com
rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812
github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2025-47813.txt
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-47813
nvd.nist.gov/vuln/detail/CVE-2025-47813