CVE-2015-10003CWE-441

FileZilla Server PORT confused deputy

Medium · published July 17, 2022

CVSS v3.1
4.3
EPSS
1%
Percentile
45.8
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the component PORT Handler. The manipulation leads to unintended intermediary. It is possible to initiate the attack remotely. Upgrading to version 0.9.51 is able to address this issue. It is recommended to upgrade the affected component.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00559 · 45.8th percentile
Weakness
CWE-441 · Unintended Proxy or Intermediary ('Confused Deputy')
Published
2022-07-17T06:35Z
EPSS history
Timeline
  • 17 JUL 06:35Z
    FileZilla Server PORT confused deputy
    cvelistv5