]> git.ipfire.org Git - thirdparty/asterisk.git/commit
manager.c: Restrict ListCategories to the configuration directory.
authorBen Ford <bford@digium.com>
Tue, 17 Dec 2024 17:42:48 +0000 (11:42 -0600)
committerBen Ford <bford@digium.com>
Thu, 9 Jan 2025 19:05:00 +0000 (19:05 +0000)
commite358ce0762993c562ccea48c20e351bec4564f81
tree77f893cfc63f6c2db6e4bf4ec531f4fdfd055940
parent6b3dadfbe27404d995fdbbc4d31e2b3d5ed2fca6
manager.c: Restrict ListCategories to the configuration directory.

When using the ListCategories AMI action, it was possible to traverse
upwards through the directories to files outside of the configured
configuration directory. This action is now restricted to the configured
directory and an error will now be returned if the specified file is
outside of this limitation.

Resolves: #GHSA-33x6-fj46-6rfh

UserNote: The ListCategories AMI action now restricts files to the
configured configuration directory.
main/manager.c