Arbitrary File Write

sbt is vulnerable to Path Traversal. The vulnerability is a result of the absence of path sanitization in the IO.scala file. This oversight allows an attacker to access files outside the expected directory and write arbitrary files. An attacker can exploit this vulnerability by providing a maliciously crafted zip or JAR file through the /root/.ssh/authorized_keys if the IO.unzip is used in the pullRemoteCache task and Resolvers.remote