maqetta/maqetta — Issue #1127: security: check username when creating new users
Author: childsb
Created: 2011-11-02 15:52:04+00:00
State: open

The createUser command does not validate the users name, but uses it for the base user directory.

An attacker could bypass the client side user name check, and create 1 or many users outside of the base user directory by supplying "../../something".

NOTE: the user woudln't have access to the folder, but could blow up the server file system with junk.