CVE-2022-27665

Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0. This can lead to execution of malicious code and commands on the client due to improper handling of user-provided input. By inputting malicious payloads in the subdirectory searchbar or Add folder filename boxes, it is possible to execute client-side commands. For example, there is Client-Side Template Injection via subFolderPath to the ThinClient/WtmApiService.asmx/GetFileSubTree URI.

• CWE-79

• https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023Third Party Advisory
• https://docs.ipswitch.com/WS_FTP_Server2020/ReleaseNotes/index.htmRelease Notes, Vendor Advisory
• https://github.com/dievus/CVE-2022-27665Exploit, Third Party Advisory
• https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023Third Party Advisory
• https://docs.ipswitch.com/WS_FTP_Server2020/ReleaseNotes/index.htmRelease Notes, Vendor Advisory
• https://github.com/dievus/CVE-2022-27665Exploit, Third Party Advisory

Published

Apr 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27659On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versi…4.3
• CVE-2022-2766A vulnerability was found in SourceCodester Loan Management …9.8
• CVE-2022-27660A denial of service vulnerability exists in the confctl_set_…7.5
• CVE-2022-27661Operation restriction bypass vulnerability in Workflow of Cy…4.3
• CVE-2022-27662On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x ve…4.8
• CVE-2022-27664In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, at…7.5
• CVE-2022-27666A heap buffer overflow flaw was found in IPsec ESP transform…7.8
• CVE-2022-27667Under certain conditions, SAP BusinessObjects Business Intel…7.5
• CVE-2022-27668Depending on the configuration of the route permission table…9.8
• CVE-2022-27669An unauthenticated user can use functions of XML Data Archiv…7.5
• CVE-2022-2767A vulnerability classified as problematic has been found in …6.1
• CVE-2022-27670SAP SQL Anywhere - version 17.0, allows an authenticated att…6.5