Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

nautilus: mgr/dashboard: fix improper URL checking #32744

Closed
wants to merge 1 commit into from
Closed

nautilus: mgr/dashboard: fix improper URL checking #32744

wants to merge 1 commit into from

Commits on Jan 21, 2020

  1. mgr/dashboard: fix improper URL checking 

    This change disables up-level references beyond the HTTP base directory.
[CVE-2020-1699]

Fixes: https://tracker.ceph.com/issues/43607
Signed-off-by: Ernesto Puerta <epuertat@redhat.com>

(cherry picked from commit 0443e40)

Conflicts:
  - src/pybind/mgr/dashboard/tests/test_home.py (refactored tests)
    @epuertat
    epuertat committed Jan 21, 2020
    Configuration menu
    Copy the full SHA
    0d20243 View commit details
    Browse the repository at this point in the history