Skip to content
OpenAdvisories

Package · Debian

jsch

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2016-5725 Public exploit EPSS 24%

    Improper Limitation of a Pathname to a Restricted Directory in JCraft JSch

    Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.

    jsch com.jcraft:jsch Debian Maven