Riskcovery

CVE-2015-10003

FileZilla Server PORT confused deputy

State
Published
Severity
4.3 Medium
Published
Jul 17, 2022
Updated
Apr 15, 2025
Reserved
Jul 16, 2022

Read the record on cve.org

Description

A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the component PORT Handler. The manipulation leads to unintended intermediary. It is possible to initiate the attack remotely. Upgrading to version 0.9.51 is able to address this issue. It is recommended to upgrade the affected component.

Scores

CVSSScoreVectorSource
3.14.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NVulDB

Weaknesses

Affected Products

ProductVersions
ServerFileZilla
  • 0.9.0Affected
  • 0.9.1Affected
  • 0.9.2Affected
  • 0.9.3Affected
  • 0.9.4Affected
  • 0.9.5Affected
  • 0.9.6Affected
  • 0.9.7Affected
  • 0.9.8Affected
  • 0.9.9Affected
  • 0.9.10Affected
  • 0.9.11Affected
  • 0.9.12Affected
  • 0.9.13Affected
  • 0.9.14Affected
  • 0.9.15Affected
  • 0.9.16Affected
  • 0.9.17Affected
  • 0.9.18Affected
  • 0.9.19Affected
  • 0.9.20Affected
  • 0.9.21Affected
  • 0.9.22Affected
  • 0.9.23Affected
  • 0.9.24Affected
  • and 26 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.