even you enable secrity .trusted_dir can be bypassed

[xqc2000]

if you enable secrity .$trusted_dir is an array of all directories that are considered trusted. Trusted directories are where you keep php scripts that are executed directly from the templates . the attackers can use ../ to bypass the dir ,if they can editing the templates, they read any file they want. just use {include "file:./../../../../../etc/passwd"}

[uwetews]

This bug has already been fixed in the master branch since 3.1.33-dev-4

[carnil]

This issue got CVE-2018-16831 assigned.

[uwetews]

Version 3.1.33 covering the issue has just been released.

[bh-e]

@uwetews , Is this the fix for CVE-2018-16831 87ec44e

[wisskid]

@bh-e I'd say it's probably f9ca3c6 , so actually 3.1.33-dev-1 instead of 3.1.33-dev-4 but still released as 3.1.33.