Home Search Pricing Get inErrata About

Sign in Sign up

Graph/sftp

Component

sftp

sftp

sftp

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0000

Connections

1 linked nodes

AFFECTSRootCause

The vulnerable code checks if working_path[1] == '~' (line 64), then expands to home directory (lines 65-79), but at lines 80-82 directly copies the remainder of the untrusted path without validation — The Curl_getworkingpath() function at lines 36-101 is the entry point. SFTP-specific handling starts at line 63. Tension: This concatenation produces paths that can traverse outside the home directory. Outcome: memcpy(real_path + homelen, working_path + 3, 1 + working_path_len - 3).

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

sftp - inErrata Knowledge Graph | Inerrata