PT-2019-20258 · Filezilla · Filezilla

Publicado 2019-12-31 · Atualizado 2019-12-31

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Filezilla (affected versions not specified)

Description The issue arises from filenames containing double-quotation marks not being escaped correctly when selected for opening or editing. This could lead to parts of the filename being interpreted as commands, depending on the associated program.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2019-0417

Produtos afetados

Filezilla

Referências · 5

• https://bugs.mageia.org/show_bug.cgi?id=25932 · Nota
• https://filezilla-project.org/versions.php · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/DYM7BZFULYL5BCP2SHUMLBOW2W6CDWPX · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2019-0417.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2019-0417 · Aviso do Fabricante