Tracker »
Issue 2377 »
Issue activity log
| 2025-05-21 14:36 | Created | Avoid replacing %2F with a slash and %2E with a dot in special cases on upload to avoid path traversal |
| Component | General | |
| Severity | Bug | |
| Comment | https://winscp.net/forum/viewtopic.php?t=35364 Emails with Zeroday PT. |
|
| Status | RESOLVED | |
| Fixed in | 6.5.2 | |
| Resolution | FIXED | |
| Comment | Fixed. | |
| 2025-05-21 16:00 | Comment | https://winscp.net/forum/viewtopic.php?t=35364· Emails with Zeroday PT <zeroday.pt@...>Aleksandr Zhurnakov (Positive Technologies.) |
| 2025-05-21 16:01 | Comment | https://winscp.net/forum/viewtopic.php?t=35364 Discovered by Aleksandr Zhurnakov (Positive Technologies). |
| 2025-05-23 07:22 | Comment | Commit d39f87c8 |