]> git.ipfire.org Git - thirdparty/asterisk.git/commit
manager.c: Restrict ListCategories to the configuration directory.
authorBen Ford <bford@digium.com>
Tue, 17 Dec 2024 17:42:48 +0000 (11:42 -0600)
committerBen Ford <bford@digium.com>
Thu, 9 Jan 2025 19:05:08 +0000 (19:05 +0000)
commitde542c35c3ad2e67b8d21683296cc87419c58baa
treed6db555d7b86f08ee7874e2b5635be2a96120691
parenteaca3ef78de27c28760674bc1687d916ac23829f
manager.c: Restrict ListCategories to the configuration directory.

When using the ListCategories AMI action, it was possible to traverse
upwards through the directories to files outside of the configured
configuration directory. This action is now restricted to the configured
directory and an error will now be returned if the specified file is
outside of this limitation.

Resolves: #GHSA-33x6-fj46-6rfh

UserNote: The ListCategories AMI action now restricts files to the
configured configuration directory.
main/manager.c