Control character filtering misses leading and trailing whitespace in file and folder names
该报告还没有中文解读。
原文摘录
摘自原文(2214 字符中的一小部分)
Summary: It is possible to create files and folders that have leading and trailing `\n`, `\r`, `\t`, and `\v` characters. The server rejects files and folders that have these characters in the middle of their names, so this might be an opportunity for injection.
原文中的代码
556 protected function verifyPosixPath($fileName) {
557 $fileName = trim($fileName);
558 $this->scanForInvalidCharacters($fileName, "\\/");
...
570 private function scanForInvalidCharacters($fileName, …默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Nextcloud 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @david_h1 · 版权归作者与 Nextcloud 所有