PT-2019-20258 · Filezilla · Filezilla

Published 2019-12-31 · Updated 2019-12-31

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Filezilla (affected versions not specified)

Description The issue arises from filenames containing double-quotation marks not being escaped correctly when selected for opening or editing. This could lead to parts of the filename being interpreted as commands, depending on the associated program.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2019-0417

Affected Products

Filezilla

References · 5

• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/DYM7BZFULYL5BCP2SHUMLBOW2W6CDWPX · Vendor Advisory
• https://advisories.mageia.org/MGASA-2019-0417.html · Security Note
• https://osv.dev/vulnerability/MGASA-2019-0417 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=25932 · Note
• https://filezilla-project.org/versions.php · Note