]> gitweb.ps.run Git - ps-cgit/commitdiff
projects / ps-cgit / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (from: 53efaf3)
clone: fix directory traversal
authorJason A. Donenfeld <Jason@zx2c4.com>
Fri, 3 Aug 2018 13:46:11 +0000 (15:46 +0200)
committerJason A. Donenfeld <Jason@zx2c4.com>
Fri, 3 Aug 2018 15:04:03 +0000 (17:04 +0200)
This was introduced in the initial version of this code, way back when
in 2008.

$ curl http://127.0.0.1/cgit/repo/objects/?path=../../../../../../../../../etc/passwd
root:x:0:0:root:/root:/bin/sh
...

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Reported-by: Jann Horn <jannh@google.com>

No differences found
Unnamed repository; edit this file 'description' to name the repository.