| Package | Affected versions | Patched versions |
|---|---|---|
| winscp | ≤ 5.13.7 |
In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially overwriting unrelated files. This affects TSCPFileSystem::SCPSink in core/ScpFileSystem.cpp.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free