Improper Limitation of a Pathname to a Restricted Directory in JCraft JSch

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

The vulnerability of the ChannelSftp.OVERWRITE component in the Java implementation of SSH2, jsch, allows a attacker to compromise the integrity of information.

The vulnerability of the ChannelSftp.OVERWRITE component in the Java SSH2 implementation jsch exists due to an incorrect pathname limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the information...