Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/18 1:9 a.m.10 views

Wish has SCP Path Traversal that allows arbitrary file read/write

Summary The SCP middleware in charm.land/wish/v2 is vulnerable to path traversal attacks. A malicious SCP client can read arbitrary files from the server, write arbitrary files to the server, and create directories outside the configured root directory by sending crafted filenames containing ../...

9.6CVSS6.6AI score0.00393EPSS
SaveExploits1References4Affected Software2
Rows per page
Query Builder