Vulnerabilities > Winscp > High

DATE CVE VULNERABILITY TITLE RISK
2019-01-10 CVE-2018-20684 Improper Input Validation vulnerability in Winscp
In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially overwriting unrelated files.
network
low complexity
winscp CWE-20
7.5