]> git.ipfire.org Git - thirdparty/asterisk.git/commit
manager.c: Restrict ListCategories to the configuration directory.
authorBen Ford <bford@digium.com>
Tue, 17 Dec 2024 17:42:48 +0000 (11:42 -0600)
committerBen Ford <bford@digium.com>
Thu, 9 Jan 2025 19:05:02 +0000 (19:05 +0000)
commit3ab4185d98db8a15053454b14d266846255b3b27
tree83231e04ecbdc0f0639428c6edb661b292d4f0c6
parentc7562392b98b8d48f7eb2868442acf553881a563
manager.c: Restrict ListCategories to the configuration directory.

When using the ListCategories AMI action, it was possible to traverse
upwards through the directories to files outside of the configured
configuration directory. This action is now restricted to the configured
directory and an error will now be returned if the specified file is
outside of this limitation.

Resolves: #GHSA-33x6-fj46-6rfh

UserNote: The ListCategories AMI action now restricts files to the
configured configuration directory.
main/manager.c