2 matches found
Internet Bug Bounty: CVE-2023-27534: SFTP path ~ resolving discrepancy
A vulnerability was discovered in curl's SFTP implementation that allowed the tilde character to be used as a prefix in the first element of a path, resulting in the wrong path being accessed. This could be exploited to circumvent filtering or other security measures. The vulnerability was presen...