| Package | Affected versions | Patched versions |
|---|---|---|
| fireftp | = 1.0.5 |
Argument injection vulnerability in (1) src/content/js/connection/sftp.js and (2) src/content/js/connection/controlSocket.js.in in FireFTP Extension 1.0.5 for Firefox allows remote authenticated SFTP users to cause victims to alter permissions, delete, download, or move the wrong file via a filename containing " (double quotes), which is not properly filtered or encoded when FireFTP constructs the command to send to psftp.exe.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free