CVE-2021-3331

creationtimestamp| type| source ---|---|--- 2021-01-28 01:25:04+00:00| seen| https://t.me/cibsecurity/22767...

CVE-2021-3331

WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads session settings. For example, this is exploitable in a default installation in which WinSCP is the handler for sftp:// URLs...