CVEs-PoC/2021/CVE-2021-3331.md

CVE-2021-3331

Description

WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads session settings. (For example, this is exploitable in a default installation in which WinSCP is the handler for sftp:// URLs.)

POC

Reference

No PoCs from references.

Github

• https://github.com/Ross46/Follina