sindre
/
Beelance
Tarkkaile 1
Äänestä 0
Fork 0
Koodi Ongelmat 6 Pull-pyynnöt 0 Julkaisut 0 Wiki Activity
Tunnisteet Merkkipaalut
Uusi ongelma

#25 File names can overwrite other resources

Avoinna
5 vuotta sitten avasi sindre · 0 kommenttia
sindre commented 5 vuotta sitten

When uploading a file it can overwrite other files, even those ondifferent levels due to lack of input validation. This is differentfrom uploading, as even without checking for file name, itshould be checked that it won’t overwrite another file.

When uploading a file it can overwrite other files, even those ondifferent levels due to lack of input validation. This is differentfrom uploading, as even without checking for file name, itshould be checked that it won’t overwrite another file.
sindre added this to the Required fixes milestone 5 vuotta sitten
sindre added the
webpy
label 5 vuotta sitten
sindre added the
bug
label 5 vuotta sitten
sindre added the
security misconfiguration
label 5 vuotta sitten
sindre modified the milestone from Required fixes to Optional vulnerabilities 5 vuotta sitten
Sign in to join this conversation.
No Branch/Tag Specified
Branchit Tagit
Tunnisteet
Tyhjennä tunnisteet
broken access control
Broken access control vulnerability broken authentication
Broken authentication vulnerability bug
Something is not working csrf
Cross site request forgery vulnerability enhancement
New feature injection
Injection vulnerability insecure deserialization
Insecure deserialization vulnerability known vulnerability
Using components with known vulnerabilities logging
Insufficient logging vulnerability nginx
Concerns nginx security misconfiguration
Security misconfiguration vulnerability sensitive data exposure
Sensitive data exposure vulnerability webpy
Concerns the webpy framework
Ei tunnistetta
broken access control
broken authentication
bug
csrf
enhancement
injection
insecure deserialization
known vulnerability
logging
nginx
security misconfiguration
sensitive data exposure
webpy
Merkkipaalu
Tyhjennä merkkipaalu
Ei merkkipaalua
Optional vulnerabilities
Assignees
Clear assignees
No Assignees
1 osallistujaa
Due Date

No due date set.

Dependencies

This issue currently doesn't have any dependencies.

Write Preview
Loading…
Peruuta
Tallenna
Sisältöä ei vielä ole.
Delete Branch '%!s(MISSING)'

Deleting a branch is permanent. It CANNOT be undone. Continue?

Ei
Kyllä