Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-2580

Improve file access sandboxing

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Critical
    • 2.3.1, 2.4 M1
    • 2.3
    • {Unused} Core
    • None
    • security, file inclusion, patch
    • Unit, Integration

    Description

      It is possible to request files outside the skins, templates and resources folders using various techniques.

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-2782 xwiki.cfg inclusi0n from URL for Girliz

          • Major - Major loss of function.
          • Closed

          Activity

            People

              sdumitriu Sergiu Dumitriu
              raffaello Raffaello Pelagalli
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: