CVE-2026-56623

설명

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories outside of the configured server-side root directory. The path validation applied for CVE-2026-48827 in Apache MINA SSHD 2.18.0 and 3.0.0-M4 was partly ineffective for Servers running on Windows. Applications are affected if they use org.apache.sshd:sshd-git to implement a git server and run on Window...

영향 제품·버전

제품 Apache Software Foundation Apache MINA SSHD, mina sshd, windows

영향 버전 Apache Software Foundation Apache MINA SSHD, mina sshd, windows >= 2.0.0 <= 2.18.0, >= 3.0.0-M1 <= 3.0.0-M4, >= 2.0.0 < 2.19.0, 3.0.0

수정 버전 Apache Software Foundation Apache MINA SSHD, mina sshd, windows 2.19.0

기술 정보

CVSS 벡터 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

CWE CWE-22