Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Copying not allowed files #3654

Open
B0D0B0P0T opened this issue Jun 4, 2024 · 1 comment
Open

Copying not allowed files #3654

B0D0B0P0T opened this issue Jun 4, 2024 · 1 comment
Labels

Comments

@B0D0B0P0T
Copy link

Describe the bug
Copying files with an unauthorized extension between server directories. In some apps the misconfiguration lead to different security issues(secrets exposure, RCE, etc.)

To Reproduce
Steps to reproduce the behavior:

  1. Create 2 folders on filesystem
  2. Manually create php file in one
  3. Be sure that php file upload restricted
  4. Be sure that you cant just copy and paste php files
  5. Copy folder with php file to other folder
  6. Check that folder copied with not allowed file php

Expected behavior
Message like "Unable to copy folder with not allowed file types"

Screenshots

Last version 2.1.65
image

Check if you can upload php files
image

Manually create php file on folder
image
image

Check if you can copy not allowed files on the same directory
image

Check if you can copy not allowed files on the other directory
image

Copy the entire folder to another one and check if the php file exists
image

Desktop:

  • OS: Debian 6.5.6-1kali1 (2023-10-09) x86_64 GNU/Linux
  • Browser firefox
  • Version15.1.0esr
Copy link

This issue is stale because it has been open for 50 days with no activity.

@github-actions github-actions bot added the stale label Jul 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant