CVE-2019-25683 - FileZilla 3.40.0 Denial of Service via Local Search

Back Back to CVE browser

MEDIUM

FileZilla 3.40.0 Denial of Service via Local Search

Published Apr 5, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.17%

Description

FileZilla 3.40.0 contains a denial of service vulnerability in the local search functionality that allows local attackers to crash the application by supplying a malformed path string. Attackers can trigger the crash by entering a crafted path containing 384 'A' characters followed by 'BBBB' and 'CCCC' sequences in the search directory field and initiating a local search operation.

Affected products

Vendor Filezilla-Project Product FileZilla Default
n/a
- Version
  3.40.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Filezilla-Project

FileZilla

n/a

Version	Status	Constraints
3.40.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-532

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-20101
Advisory
https://filezilla-project.org
product
https://www.exploit-db.com/exploits/46484
exploitThird Party AdvisoryVDB Entry
https://www.vulncheck.com/advisories/filezilla-denial-of-service-via-local-search
third-party-advisoryThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-20101		Advisory
https://filezilla-project.org		product
https://www.exploit-db.com/exploits/46484		exploitThird Party AdvisoryVDB Entry
https://www.vulncheck.com/advisories/filezilla-denial-of-service-via-local-search		third-party-advisoryThird Party Advisory