Vulnerability	Vulnerable Version
H Directory Traversal Affected versions of this package are vulnerable to Directory Traversal in the `resolveIncomingFilePath` method of the `ScpFileOpener` interface, which resolves the sender-supplied filename from an SCP `C` or `D` command against the local target directory without validating it. An attacker acting as the SCP counterparty can write files outside the intended target directory by sending a filename containing `../` segments or an absolute path, bounded by the receiving process's filesystem permissions. Exploitation requires the application to use `sshd-scp` to receive files, either a client downloading from a malicious server or a server accepting uploads from a malicious authenticated client. Applications on 2.0.0 or later that do not use `sshd-scp` are not affected. How to fix Directory Traversal? Upgrade `org.apache.sshd:sshd-scp` to version 2.19.0, 3.0.0-M5 or higher.	[,2.19.0)[3.0.0-M1,3.0.0-M5)

Directory Traversal

Affected versions of this package are vulnerable to Directory Traversal in the resolveIncomingFilePath method of the ScpFileOpener interface, which resolves the sender-supplied filename from an SCP C or D command against the local target directory without validating it. An attacker acting as the SCP counterparty can write files outside the intended target directory by sending a filename containing ../ segments or an absolute path, bounded by the receiving process's filesystem permissions. Exploitation requires the application to use sshd-scp to receive files, either a client downloading from a malicious server or a server accepting uploads from a malicious authenticated client. Applications on 2.0.0 or later that do not use sshd-scp are not affected.

How to fix Directory Traversal?

Upgrade org.apache.sshd:sshd-scp to version 2.19.0, 3.0.0-M5 or higher.

[,2.19.0)[3.0.0-M1,3.0.0-M5)

Go back to all versions of this package