CVE-2024-41258

5.3 mediumEPSS 0.2%

Medium (5.3) in filestash filestash. EPSS 0.2% chance of exploitation in the next 30 days.

An issue was discovered in filestash v0.4. The usage of the ssh.InsecureIgnoreHostKey() disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWEs: CWE-347, CWE-295
Published: 2024-07-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

filestash:filestash

References

https://gist.github.com/nyxfqq/ed8c2ba3398c9e28cd8dbf0902bd8edf

Check your stack JSON