3 ms·
What about "GET //etc/passwd"?
by formerly_proven 5y ago
What about "GET //etc/passwd"?
- NieDzejkob 5y agoJust fired up the server and that does indeed break it. I suppose openat2 with RESOLVE_BENEATH and AT_FDCWD would be a bullet-proof fix, but that's not very codegolf.
- jpegqs 5y agoYes, that's a vulnerability, I have fixed it on github.
- irundebian 5y agoActually it's the job of the operating system to handle file system authorizations. It's just the case that we have shitty default configurations for operating operating systems which allows a lot of ambient authority.