CVE-2016-5725
MEDIUM 5.9EPSS 24.1%
Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.
- CVSS v3.0 NVD
- 5.9 MEDIUM
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N - EPSS
- 24.14% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2017-01-19
- Updated
- 2024-08-06
ExploitDB entries (1)
Security advisories
- http://packetstormsecurity.com/files/138809/jsch-0.1.53-Path-Traversal.html
- http://seclists.org/fulldisclosure/2016/Sep/53
- http://www.securityfocus.com/bid/93100
- tintinweb/pub/tree/master/pocs/cve-2016-5725
- advisories/GHSA-q446-82vq-w674
- http://www.jcraft.com/jsch/ChangeLog
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/security-alerts/cpuoct2020.html