https://bugzilla.redhat.com/show_bug.cgi?id=1375941
--- Doc Text *updated* by Eric Christensen <sparks(a)redhat.com> ---
A vulnerability was discovered in JSch that allows a malicious sftp server to force a
client-side relative path traversal in jsch's implementation for recursive sftp-get.
An attacker could leverage this to write files outside the client's download basedir
with effective permissions of the jsch sftp client process.
--
You are receiving this mail because:
You are on the CC list for the bug.