How severe is CVE-2025-47813?

CVE-2025-47813 has a CVSS 3.x base score of 4.3, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.

Is CVE-2025-47813 being actively exploited?

Yes. CVE-2025-47813 is on CISA's Known Exploited Vulnerabilities (KEV) catalog, added on 2026-03-16, which means active exploitation has been confirmed. It should be prioritised for remediation.

What products are affected by CVE-2025-47813?

CVE-2025-47813 affects Wftpserver Wing Ftp Server. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-47813?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Because this CVE is known to be actively exploited, treat remediation as urgent — CISA KEV typically sets a short remediation deadline.

Does CVE-2025-47813 have an EU (EUVD) identifier?

Yes. CVE-2025-47813 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-21020. It is also flagged as exploited in the EUVD (since 2026-03-16).

When was CVE-2025-47813 published?

CVE-2025-47813 was published on 2025-07-10 and last updated on 2026-06-17.

CVE-2025-47813

CVE-2025-47813 is a medium-severity vulnerability in Wftpserver Wing Ftp Server with a CVSS 3.x base score of 4.3. It is listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, confirming it has been exploited in the wild (added 2026-03-16). The underlying weakness is classified as CWE-209.

Key facts

Severity: Medium (CVSS 3.x base score 4.3)
EPSS exploit prediction: 56% (99th percentile)
Actively exploited: Yes — listed in CISA KEV (added 2026-03-16)
EU (EUVD) id: EUVD-2025-21020
EU exploitation: Flagged exploited in the ENISA EU Vulnerability Database (since 2026-03-16)
Weakness: CWE-209
Affected product: Wftpserver Wing Ftp Server
Published: 2025-07-10
Last modified: 2026-06-17

Description

loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.

Frequently asked questions

What is CVE-2025-47813?: loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.
How severe is CVE-2025-47813?: CVE-2025-47813 has a CVSS 3.x base score of 4.3, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.
Is CVE-2025-47813 being actively exploited?: Yes. CVE-2025-47813 is on CISA's Known Exploited Vulnerabilities (KEV) catalog, added on 2026-03-16, which means active exploitation has been confirmed. It should be prioritised for remediation.
What products are affected by CVE-2025-47813?: CVE-2025-47813 affects Wftpserver Wing Ftp Server. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-47813?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Because this CVE is known to be actively exploited, treat remediation as urgent — CISA KEV typically sets a short remediation deadline.
Does CVE-2025-47813 have an EU (EUVD) identifier?: Yes. CVE-2025-47813 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-21020. It is also flagged as exploited in the EUVD (since 2026-03-16).
When was CVE-2025-47813 published?: CVE-2025-47813 was published on 2025-07-10 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:wftpserver:wing_ftp_server:*:*:*:*:*:*:*:*

More vulnerabilities in Wftpserver Wing Ftp Server

CVE-2025-47812 — Critical (CVSS 10.0): In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection…
CVE-2020-37032 — High (CVSS 8.8): Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows…
CVE-2019-25267 — High (CVSS 7.8): Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially…
CVE-2020-9470 — High (CVSS 7.8): An issue was discovered in Wing FTP Server 6.2.5 before February 2020. Due to insecure permissions when handling…
CVE-2020-8635 — High (CVSS 7.8): Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and…
CVE-2020-8634 — High (CVSS 7.8): Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified within the HTTP file…

All CVEs affecting Wftpserver Wing Ftp Server →

Other CWE-209 (Generation of Error Message Containing Sensitive Information) vulnerabilities

CVE-2025-62168 — Critical (CVSS 10.0): Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication…
CVE-2025-68110 — Critical (CVSS 9.9): ChurchCRM is an open-source church management system. Versions prior to 6.5.3 may disclose database information in an…
CVE-2025-46658 — Critical (CVSS 9.8): An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. There are verbose error messages.
CVE-2024-28285 — Critical (CVSS 9.8): A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of Cryptopp Crypto++ 8.9, allows…
CVE-2023-40767 — Critical (CVSS 9.8): User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where…
CVE-2023-40766 — Critical (CVSS 9.8): User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery,…

Browse all CWE-209 (Generation of Error Message Containing Sensitive Information) vulnerabilities →