avalanche123/AvalancheImagineBundle — Issue #40: Security bug
Author: hlecorche
Created: 2011-11-16 13:22:32+00:00
State: open

My app structure:

* app
* src
* vendor
* .........
* web
* images
* image1.jpg
* image2.jpg

image1.jpg is accessible and image2.jpg is not accessible.
But with "/media/cache/my_thumb/../image2.jpg", image2.jpg is accessible! We can read files that are outside the web directory...