[Issue 19564] New: The example Print hex dump allows to read arbitrary files from the server
d-bugmail at puremagic.com
d-bugmail at puremagic.com
Wed Jan 9 09:45:14 UTC 2019
https://issues.dlang.org/show_bug.cgi?id=19564
Issue ID: 19564
Summary: The example Print hex dump allows to read arbitrary
files from the server
Product: D
Version: D2
Hardware: All
OS: All
Status: NEW
Severity: normal
Priority: P1
Component: dlang.org
Assignee: nobody at puremagic.com
Reporter: dchristofas at posteo.de
If you change "thisExePath" with another file path e.g. "/etc/lsb-release" and
run the program, you are able to read that file.
I'm not sure if this is known but it could be a security risk.
--
More information about the Digitalmars-d-bugs
mailing list