[VD:core] fix #3617 Filename Restriction Bypass Leading To Persistent…

… Cross-site Scripting Vulnerability
Studio-42 · Dec 20, 2023 · bb8c8dc · bb8c8dc
1 parent fc011b1
commit bb8c8dc
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/php/elFinderVolumeDriver.class.php b/php/elFinderVolumeDriver.class.php
@@ -4919,7 +4919,13 @@ static protected function mimetypeInternalDetect($path = '')
             $pinfo = pathinfo($path);
             $ext = isset($pinfo['extension']) ? strtolower($pinfo['extension']) : '';
         }
-        return ($ext && isset(elFinderVolumeDriver::$mimetypes[$ext])) ? elFinderVolumeDriver::$mimetypes[$ext] : 'unknown';
+        $res = ($ext && isset(elFinderVolumeDriver::$mimetypes[$ext])) ? elFinderVolumeDriver::$mimetypes[$ext] : 'unknown';
+        // Recursive check if MIME type is unknown with multiple extensions
+        if ($res === 'unknown' && strpos($pinfo['filename'], '.')) {
+            return elFinderVolumeDriver::mimetypeInternalDetect($pinfo['filename']);
+        } else {
+            return $res;
+        }
     }
 
     /**