Tracker »

Issue 2377 – Avoid replacing %2F with a slash and %2E with a dot in special cases on upload to avoid path traversal

: General
: Unspecified
: Bug
: Medium
: 0
: RESOLVED
: FIXED
: 6.5.2
https://winscp.net/forum/viewtopic.php?t=35364
Discovered by Aleksandr Zhurnakov (Positive Technologies).