]> git.ipfire.org Git - thirdparty/asterisk.git/commit
manager.c: Restrict ListCategories to the configuration directory.
authorBen Ford <bford@digium.com>
Tue, 17 Dec 2024 17:42:48 +0000 (11:42 -0600)
committerBen Ford <bford@digium.com>
Thu, 9 Jan 2025 19:09:13 +0000 (13:09 -0600)
commitffc2aeaa8f3f4dccd828c11374d539e7935b5062
treeafb2924a767b4b0a2fd2df120a899ef044abf729
parent3f3dab0bfe4846d2f18672d019f55f3a8327ae1a
manager.c: Restrict ListCategories to the configuration directory.

When using the ListCategories AMI action, it was possible to traverse
upwards through the directories to files outside of the configured
configuration directory. This action is now restricted to the configured
directory and an error will now be returned if the specified file is
outside of this limitation.

Resolves: #GHSA-33x6-fj46-6rfh

UserNote: The ListCategories AMI action now restricts files to the
configured configuration directory.
main/manager.c