CVE-2019-5429CWE-426

Untrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a malicious 'fzsftp' binary in the user's home directory

published April 29, 2019

CVSS
—
EPSS
3%
Percentile
86.6
In the wild
Unconfirmed
What it is

Untrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a malicious 'fzsftp' binary in the user's home directory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02838 · 86.6th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2019-04-29T14:13Z
EPSS history
Timeline
  • 29 APR 14:13Z
    Untrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a malicious 'fzsftp' binary in the user's home directory
    cvelistv5