Skip to content


(KVE-2021-1846) url 값에 Line feed인 "%0A" 값을 삽입하여 전송하는 경우 check_url_hos…
Browse files Browse the repository at this point in the history
…t 함수 우회 취약점 수정 (Pocas님)
  • Loading branch information
kagla committed Dec 8, 2021
1 parent 7a054e1 commit d87802e
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion lib/common.lib.php
Expand Up @@ -3299,7 +3299,7 @@ function check_url_host($url, $msg='', $return_url=G5_URL, $is_redirect=false)
$msg = 'url에 타 도메인을 지정할 수 없습니다.';

$p = @parse_url($url);
$p = @parse_url(trim($url));
$host = preg_replace('/:[0-9]+$/', '', $_SERVER['HTTP_HOST']);
$is_host_check = false;

Expand Down

0 comments on commit d87802e

Please sign in to comment.