Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9p3w-rm2q-9gxc

Опубликовано: 26 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5

Описание

A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences.

This is the same issue as in OpenSSH, tracked as CVE-2019-6111.

A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences.

This is the same issue as in OpenSSH, tracked as CVE-2019-6111.

EPSS

Процентиль: 11%
0.00037
Низкий

5 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

ubuntu
около 2 месяцев назад

[Improper sanitation of paths received from SCP servers]

CVSS3: 5
redhat
около 2 месяцев назад

A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences. This is the same issue as in OpenSSH, tracked as CVE-2019-6111.

debian

[Improper sanitation of paths received from SCP servers]

suse-cvrf
27 дней назад

Security update for libssh

suse-cvrf
27 дней назад

Security update for libssh

EPSS

Процентиль: 11%
0.00037
Низкий

5 Medium

CVSS3

Дефекты

CWE-22