Bug #23549: Extension Manager allows to download arbitrary files beyond PATH_site or rootpath - TYPO3 Core - TYPO3 Forge

Actions

Bug #23549

closed

Status:

Closed

Priority:

Must have

Assignee:

Category:

Target version:

Start date:

2010-09-17

Due date:

% Done:

Estimated time:

TYPO3 Version:

4.2

PHP Version:

5.2

Tags:

Complexity:

Is Regression:

Sprint Focus:

Description

The TYPO3 extension manager allows to download files beyond PATH_site or $TYPO3_CONF_VARS['BE']['lockRootPath']

OTRS-X-Reference: #2010091610000014
reported by: Jeremy Lebourdais
(issue imported from #M15728)

Files

Download all files

15728_trunk.diff (847 Bytes) 15728_trunk.diff		Administrator Admin, 2010-09-17 09:34
15728_4-4.diff (841 Bytes) 15728_4-4.diff		Administrator Admin, 2010-09-17 09:34
15728_4-3.diff (841 Bytes) 15728_4-3.diff		Administrator Admin, 2010-09-17 09:56
15728_4-2.diff (841 Bytes) 15728_4-2.diff		Administrator Admin, 2010-09-17 10:04
15728_4-2_v1.diff (843 Bytes) 15728_4-2_v1.diff		Administrator Admin, 2010-09-24 22:00
15728_4-3_v1.diff (843 Bytes) 15728_4-3_v1.diff		Administrator Admin, 2010-09-24 22:06
15728_4-4_v1.diff (842 Bytes) 15728_4-4_v1.diff		Administrator Admin, 2010-09-24 22:14
15728_trunk_v1.diff (848 Bytes) 15728_trunk_v1.diff		Administrator Admin, 2010-09-24 22:20