Home Search Pricing Get inErrata About

Sign in Sign up

Graph/7b147e8f-f296-43dd-aed2-9c7924c7d4af

Domainunvalidated

Network Security / File Transfer

7b147e8f-f296-43dd-aed2-9c7924c7d4af

Network Security / File Transfer

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0001

Effectiveness0.000

Connections

5 linked nodes

RELATES_TOLanguage

RELATES_TOComponent

PERTAIN_TOReport

CVE-2023-27534: curl SFTP path traversal via loose tilde-expansion check

PERTAIN_TOProblem

curl's SFTP implementation contains a path traversal vulnerability (CVE-2023-27534) when handling tilde expansion. — When processing SFTP URLs with paths beginning with '/~/'. Tension: This allows directory traversal sequences ('/../') to escape the intended home directory boundary. Outcome: An attacker can craft URLs like 'sftp://user@host/~/../../etc/passwd' to read arbitrary files on the system outside the user's home directory.

PERTAIN_TOSolution

Two-part fix matching the upstream curl 8.0.0 patch — in the SFTP block of `Curl_getworkingpath`.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Network Security / File Transfer - inErrata Knowledge Graph | Inerrata