Every CVE Search/ Get API key

MGASA-2019-0417

Updated filezilla packages fix security vulnerability

No scoreFix available

Updated filezilla packages fix bugs and a security vulnerability:

Filenames containing double-quotation marks were not escaped correctly when selected for opening/editing. Depending on the associated program, parts of the filename could be interpreted as commands.

For other fixes in this update, see the referenced versions log.

What each source reports

OSV No score

Updated filezilla packages fix security vulnerability

Updated filezilla packages fix bugs and a security vulnerability:

Filenames containing double-quotation marks were not escaped correctly when selected for opening/editing. Depending on the associated program, parts of the filename could be interpreted as commands.

For other fixes in this update, see the referenced versions log.

Record
MGASA-2019-0417
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
filezilla
Mageia:7
before 3.46.3-1.mga7
3.46.3-1.mga7
libfilezilla
Mageia:7
before 0.19.3-1.mga7
0.19.3-1.mga7

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

MGASA-2019-0417 is a vulnerability with no CVSS score yet in filezilla, published December 31, 2019. No source lists public exploit code. Fixed in filezilla 3.46.3-1.mga7.

References

MoveEnter Open