NFS server misconfiguration allows file access outside the exported directory
-
https://github.com/FOGProject/fogproject/security/advisories/GHSA-3xjr-xf9v-hwjh
This issue after our initial fix we still allowed some insecure locks. This was reported after the root vulnerability was patched. This addressed in dev-branch and working-1.6
Thanks all.
Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG! Get in contact with me (chat bubble in the top right corner) if you want to join in.
Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)
Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG
-
This was reported and tested and reported by the github username philipp-tg.
Thank you!
