Debian/jsch: medium 5.9
Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash)
Action: Upgrade jsch to 0.1.54-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.54-1 | - |
Fixed versions
| 0.1.54-1 |
Sources
published · modified · JSON