Security Advisory

CVE-2018-20684

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-01-10 21:00:00

Last updated 2024-08-05 12:05:17

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially overwriting unrelated files. This affects TSCPFileSystem::SCPSink in core/ScpFileSystem.cpp.

← Browse all CVEs View on cve.org ↗