CVE-2019-25683
Medium · 6.2CVSS
6.2
EPSS
0.2%
Published
Apr 5, 2026
CISA due date
—
The record
FileZilla 3.40.0 contains a denial of service vulnerability in the local search functionality that allows local attackers to crash the application by supplying a malformed path string. Attackers can trigger the crash by entering a crafted path containing 384 'A' characters followed by 'BBBB' and 'CCCC' sequences in the search directory field and initiating a local search operation.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-16648 Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log… CWE-532
- CVE-2026-104872 OpenTelemetry JavaScript Contrib provides instrumentation libraries for collecting… CWE-532
- CVE-2026-81870 OpenTelemetry-Go is the Go implementation of OpenTelemetry. CWE-532
- CVE-2026-87993 The consul-template library is vulnerable to an information disclosure issue in its error… CWE-532
- CVE-2026-80169 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-532
- CVE-2026-79966 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-532
- CVE-2026-86597 Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC… CWE-532
- CVE-2026-86501 In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to… CWE-532