[Issue 19564] New: The example Print hex dump allows to read arbitrary files from the server
    d-bugmail at puremagic.com 
    d-bugmail at puremagic.com
       
    Wed Jan  9 09:45:14 UTC 2019
    
    
  
https://issues.dlang.org/show_bug.cgi?id=19564
          Issue ID: 19564
           Summary: The example Print hex dump allows to read arbitrary
                    files from the server
           Product: D
           Version: D2
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P1
         Component: dlang.org
          Assignee: nobody at puremagic.com
          Reporter: dchristofas at posteo.de
If you change "thisExePath" with another file path e.g. "/etc/lsb-release" and
run the program, you are able to read that file.
I'm not sure if this is known but it could be a security risk.
--
    
    
More information about the Digitalmars-d-bugs
mailing list