Security vulnerabilities

Status Closed
Assigned To

cbay
Private

Attached to Project: Security vulnerabilities
Opened by rezax69 - 04.09.2026
Last edited by cbay - 05.09.2026

FS#472 - Host system files served publicly from customer web root via symlink

text/plain; charset=us-ascii

report.md (6 KiB)

text/x-shellscript; charset=us-ascii

poc.sh (1.6 KiB)

Closed by cbay
05.09.2026 06:51
Reason for closing: Invalid

Comments (1)
Related Tasks (0/0)

cbay commented on 05.09.2026 06:51

Hello,

If you create a symlink that points to a world-readable file, you can read it. I can't see the vulnerability here.

Kind regards,
Cyril

	Tasks related to this task (0)

Loading...

Keyboard shortcuts

Available keyboard shortcuts

Alt + ⇧ Shift + l Login Dialog / Logout
Alt + ⇧ Shift + a Add new task
Alt + ⇧ Shift + m My searches
Alt + ⇧ Shift + t focus taskid search

Tasklist

o open selected task
j move cursor down
k move cursor up

Task Details

n Next task
p Previous task
Alt + ⇧ Shift + e ↵ Enter Edit this task
Alt + ⇧ Shift + w watch task
Alt + ⇧ Shift + y Close Task

Task Editing

Alt + ⇧ Shift + s save task