CVE-2016-15003CWE-428

FileZilla Client Installer uninstall.exe unquoted search path

Medium · published July 18, 2022

CVSS v3.1
6.3
EPSS
1%
Percentile
61.6
In the wild
Unconfirmed
What it is

A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects unknown code of the file C:\Program Files\FileZilla FTP Client\uninstall.exe of the component Installer. The manipulation leads to unquoted search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00977 · 61.6th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2022-07-18T08:35Z
EPSS history
Timeline
  • 18 JUL 08:35Z
    FileZilla Client Installer uninstall.exe unquoted search path
    cvelistv5