maqetta/maqetta — Issue #1131: Security: path traversal and null byte injection in GetPreferences command
Author: childsb
Created: 2011-11-02 15:58:04+00:00
State: open

User could pass in ../../.. as "base" in savePreferences escaping from the current diretory and inject a null byte at the end of the path-parameter in orter to escape the attached .settings direrectory.. this could be used to access arbitrary files on the server.