CyberRota Analysis
AI-GeneratedThe AsyncSSH Python package prior to version 2.23.1 is vulnerable to directory traversal attacks, allowing a malicious SSH server to write arbitrary files to the SCP client's filesystem by exploiting improper handling of filenames. This can lead to unauthorized file access or modification, posing a significant risk to the integrity and confidentiality of the system. Organizations using AsyncSSH for secure file transfers should prioritize upgrading to version 2.23.1 to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.1, a malicious SSH server can write arbitrary files on the asyncssh SCP client's filesystem by sending filenames containing ../ traversal sequences because _parse_cd_args in scp.py returns server-provided names verbatim and _recv_files joins them to the destination path without enforcing the target directory boundary. This issue is fixed in version 2.23.1.