]> git.ipfire.org Git - people/ms/ipfire-2.x.git/commit
projects / people / ms / ipfire-2.x.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fd313a1) | patch
backup: Sanitise FILE parameter
authorMichael Tremer <michael.tremer@ipfire.org>
Thu, 30 Aug 2018 09:20:06 +0000 (10:20 +0100)
committerMichael Tremer <michael.tremer@ipfire.org>
Thu, 30 Aug 2018 09:20:06 +0000 (10:20 +0100)
commitefafc1080ac5a89248d40df069787643649ad2ff
tree2b9bb0b7307324a0a884767f14d38199141978c0tree
parentfd313a1ae690ce95d91802fea0d94d85da084fd8commit | diff
backup: Sanitise FILE parameter

This parameter was passed to some shell commands without any
sanitisation which allowed an attacker who was authenticated to
the web UI to download arbitrary files from some directories
and delete any file from the filesystem.

References: #11830

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
html/cgi-bin/backup.cgi diff | blob | blame | history
Michael's tree of IPFire 2.x.