CVE-2018-20684

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially overwriting unrelated files. This affects TSCPFileSystem::SCPSink in core/ScpFileSystem.cpp.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Jan 10, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-206855.3In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty f CVE-2018-206879.8An XML external entity (XXE) vulnerability in CommandCenterWebServices/.*?wsdl in Raritan CommandCenter Secure Gateway before 8.0.0 allows r CVE-2018-206986.1The floragunn Search Guard plugin before 6.x-16 for Kibana allows URL injection for login redirects on the login page when basePath is set.CVE-2018-206994.9Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory consumption) via a large integer in a --cpuset-mems CVE-2018-207035.4CubeCart 6.2.2 has Reflected XSS via a /{ADMIN-FILE}/ query string.CVE-2018-207126.5A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1 CVE-2018-207138.8Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404.CVE-2018-207148.1The logging system of the Automattic WooCommerce plugin before 3.4.6 for WordPress is vulnerable to a File Deletion vulnerability. This allo CVE-2018-207159.8The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the oxConfig::getReques CVE-2018-207169.8CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature.CVE-2018-207178.8In the orders section of PrestaShop before 1.7.2.5, an attack is possible after gaining access to a target store with a user role with the r CVE-2018-207189.8In Pydio before 8.2.2, an attack is possible via PHP Object Injection because a user is allowed to use the $phpserial$a:0:{} syntax to store