CVE-2020-15778

scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."

• CWE-78
• CWE-78

• https://access.redhat.com/errata/RHSA-2024:3166Third Party Advisory
• https://github.com/cpandya2909/CVE-2020-15778/Exploit, Third Party Advisory
• https://news.ycombinator.com/item?id=25005567Third Party Advisory
• https://security.gentoo.org/glsa/202212-06Third Party Advisory
• https://security.netapp.com/advisory/ntap-20200731-0007/Third Party Advisory
• https://www.openssh.com/security.htmlVendor Advisory
• https://access.redhat.com/errata/RHSA-2024:3166Third Party Advisory
• https://github.com/cpandya2909/CVE-2020-15778/Exploit, Third Party Advisory
• https://news.ycombinator.com/item?id=25005567Third Party Advisory
• https://security.gentoo.org/glsa/202212-06Third Party Advisory
• https://security.netapp.com/advisory/ntap-20200731-0007/Third Party Advisory
• https://www.openssh.com/security.htmlVendor Advisory

Published

Jul 24, 2020

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15772An issue was discovered in Gradle Enterprise 2018.5 - 2020.2…4.9
• CVE-2020-15773An issue was discovered in Gradle Enterprise before 2020.2.4…6.5
• CVE-2020-15774An issue was discovered in Gradle Enterprise 2018.5 - 2020.2…6.8
• CVE-2020-15775An issue was discovered in Gradle Enterprise 2017.1 - 2020.2…7.5
• CVE-2020-15776An issue was discovered in Gradle Enterprise 2018.2 - 2020.2…8.8
• CVE-2020-15777An issue was discovered in the Maven Extension plugin before…7.8
• CVE-2020-15779A Path Traversal issue was discovered in the socket.io-file …7.5
• CVE-2020-1578An information disclosure vulnerability exists in the Window…4.7
• CVE-2020-15780An issue was discovered in drivers/acpi/acpi_configfs.c in t…6.7
• CVE-2020-15781A vulnerability has been identified in SICAM WEB firmware fo…9.6
• CVE-2020-15782A vulnerability has been identified in SIMATIC Drive Control…9.8
• CVE-2020-15783A vulnerability has been identified in SIMATIC S7-300 CPU fa…7.5