maqetta/maqetta — Issue #1132: Security: SetPreferences command
Author: childsb
Created: 2011-11-02 15:59:08+00:00
State: open

The set preferences command does not path check, and could allow a user to escape the user directory and modify arbitrary files on the server.