Maven/org.apache.sshd:sshd-sftp CVE-2023-35887: medium 5, EPSS 1.31%
Apache MINA SSHD information disclosure vulnerability
Action: Upgrade org.apache.sshd:sshd-sftp to 2.9.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 2.9.3 | - |
Fixed versions
| 2.9.3 |
Sources
- osv: GHSA-mjmq-gwgm-5qhm#Maven/org.apache.sshd:sshd-sftp
- https://nvd.nist.gov/vuln/detail/CVE-2023-35887
- https://github.com/apache/mina-sshd/pull/362
- https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0
- https://github.com/apache/mina-sshd/commit/a61e93035f06bff8fc622ad94870fb773d48b9f0
- https://github.com/apache/mina-sshd/commit/c20739b43aab0f7bf2ccad982a6cb37b9d5a8a0b
- https://github.com/apache/mina-sshd
- https://issues.apache.org/jira/browse/SSHD-1324
- https://lists.apache.org/thread/b9qgtqvhnvgfpn0w1gz918p21p53tqk2
CVE-2023-35887 · published · modified · JSON