system
Describe <CVE-2018-20684>.
user
What is <CVE-2018-20684>?
assistant
In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially overwriting unrelated files. This affects TSCPFileSystem::SCPSink in core/ScpFileSystem.cpp..