FHEM/fhem-mirror
2
0
Fork 0
mirror of https://github.com/fhem/fhem-mirror.git synced 2025-04-30 12:07:09 +00:00
Code Issues Releases Wiki Activity

92_FileLog.pm: Fix CVE-2020-19360 (Forum #135959)

Browse Source 
git-svn-id: https://svn.fhem.de/fhem/trunk@28210 2b470e98-0d58-463d-a4d8-8e2adae1ed80
This commit is contained in:
rudolfkoenig 2023-11-26 09:42:20 +00:00
parent 7bc77d3797
commit cfc8a4f15c
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
fhem/FHEM/92_FileLog.pm
View File

@ -711,6 +711,11 @@ FileLog_logWrapper($)
return 0; return 0;
} }
if($file =~ m,.*/.*([^/]+$),) { # 135959
Log 1, "ERROR: FileLog_logWrapper: / not allowed in filename ($file)";
return 0;
}
if(defined($type) && $type eq "text") { if(defined($type) && $type eq "text") {
$defs{$d}{logfile} =~ m,^(.*)/([^/]*)$,; # Dir and File $defs{$d}{logfile} =~ m,^(.*)/([^/]*)$,; # Dir and File
my $path = "$1/$file"; my $path = "$1/$file";