[Issue 19564] New: The example Print hex dump allows to read arbitrary files from the server

d-bugmail at puremagic.com d-bugmail at puremagic.com
Wed Jan 9 09:45:14 UTC 2019


https://issues.dlang.org/show_bug.cgi?id=19564

          Issue ID: 19564
           Summary: The example Print hex dump allows to read arbitrary
                    files from the server
           Product: D
           Version: D2
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P1
         Component: dlang.org
          Assignee: nobody at puremagic.com
          Reporter: dchristofas at posteo.de

If you change "thisExePath" with another file path e.g. "/etc/lsb-release" and
run the program, you are able to read that file.

I'm not sure if this is known but it could be a security risk.

--


More information about the Digitalmars-d-bugs mailing list