]> git.ipfire.org Git - thirdparty/asterisk.git/commit
manager.c: Restrict ListCategories to the configuration directory.
authorBen Ford <bford@digium.com>
Tue, 17 Dec 2024 17:42:48 +0000 (11:42 -0600)
committerBen Ford <bford@digium.com>
Thu, 9 Jan 2025 19:05:11 +0000 (19:05 +0000)
commit5209eeaeb0aefdbe305b2a83fa6ed6b7bb40162a
treedf11375e31a618e721c846d06e7bf57358df7e0f
parentff94f597c0dfcd1ad2370a0a4988742cb6fe098b
manager.c: Restrict ListCategories to the configuration directory.

When using the ListCategories AMI action, it was possible to traverse
upwards through the directories to files outside of the configured
configuration directory. This action is now restricted to the configured
directory and an error will now be returned if the specified file is
outside of this limitation.

Resolves: #GHSA-33x6-fj46-6rfh

UserNote: The ListCategories AMI action now restricts files to the
configured configuration directory.
main/manager.c