/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CVE-2016-5725

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2016-5725

Severity

5.9

Medium

CVSS V3

Description

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.

References

Affected packages


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing