SECURITY: Fix Directory Traversal Vulerability.

horde · Mar 8, 2020 · 8844968 · 8844968
1 parent 9216d86
commit 8844968
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/lib/Block/Bookmarks.php b/lib/Block/Bookmarks.php
@@ -68,7 +68,7 @@ protected function _title()
      */
     protected function _content()
     {
-        $template = TREAN_TEMPLATES . '/block/' . $this->_params['template'] . '.inc';
+        $template = TREAN_TEMPLATES . '/block/' . basename($this->_params['template']) . '.inc';
 
         $sortby = 'title';
         $sortdir = 0;

diff --git a/lib/Block/Mostclicked.php b/lib/Block/Mostclicked.php
@@ -58,7 +58,7 @@ protected function _title()
      */
     protected function _content()
     {
-        $template = TREAN_TEMPLATES . '/block/' . $this->_params['template'] . '.inc';
+        $template = TREAN_TEMPLATES . '/block/' . basename($this->_params['template']) . '.inc';
 
         $html = '';
         $bookmarks = $GLOBALS['trean_gateway']->listBookmarks('clicks', 1, 0, $this->_params['rows']);