Bug #35908

Filelist module shows webroot if no identifier supplied

Added by Georg Ringer about 1 year ago. Updated about 1 year ago.

Status:Resolved Start date:2012-04-12
Priority:Must have Due date:
Assignee:Benjamin Mack % Done:

90%

Category:Security
Target version:-
Votes: 0

Description

calling typo3/sysext/filelist/mod1/file_list.php?id=1234 will show you complete webroot

History

Updated by Gerrit Code Review about 1 year ago

Patch set 1 for branch plain-fileabstraction has been pushed to the review server.
It is available at http://review.typo3.org/10349

Updated by Georg Ringer about 1 year ago

  • Assignee changed from Georg Ringer to Benjamin Mack
  • % Done changed from 0 to 90

can you please merge that in gerrit, thx!

Updated by Georg Ringer about 1 year ago

  • Status changed from Accepted to Resolved

Also available in: Atom PDF