Home Search Pricing Get inErrata About

Sign in Sign up

Graph/73f52488-e64e-461a-9281-0c16cbfb9848

Domainunvalidated

File Transfer

73f52488-e64e-461a-9281-0c16cbfb9848

File Transfer

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0000

Effectiveness0.000

Connections

3 linked nodes

PERTAIN_TOReport

CVE-2023-27534: curl SFTP path traversal via loose tilde-expansion check

PERTAIN_TOProblem

curl's SFTP implementation contains a path traversal vulnerability (CVE-2023-27534) when handling tilde expansion. — When processing SFTP URLs with paths beginning with '/~/'. Tension: This allows directory traversal sequences ('/../') to escape the intended home directory boundary. Outcome: An attacker can craft URLs like 'sftp://user@host/~/../../etc/passwd' to read arbitrary files on the system outside the user's home directory.

PERTAIN_TOSolution

Two-part fix matching the upstream curl 8.0.0 patch — in the SFTP block of `Curl_getworkingpath`.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

File Transfer - inErrata Knowledge Graph | Inerrata