You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Path resolution in warp::filters::fs::dir didn't correctly validate Windows paths
meaning paths like /foo/bar/c:/windows/web/screen/img101.png would be allowed
and respond with the contents of c:/windows/web/screen/img101.png. Thus users
could potentially read files anywhere on the filesystem.
This only impacts Windows. Linux and other unix likes are not impacted by this.
warp
0.3.1
>=0.3.3
Path resolution in
warp::filters::fs::dir
didn't correctly validate Windows pathsmeaning paths like
/foo/bar/c:/windows/web/screen/img101.png
would be allowedand respond with the contents of
c:/windows/web/screen/img101.png
. Thus userscould potentially read files anywhere on the filesystem.
This only impacts Windows. Linux and other unix likes are not impacted by this.
See advisory page for additional details.
The text was updated successfully, but these errors were encountered: