Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Potential security issue #397

Closed
oomb opened this issue Jun 16, 2021 · 2 comments
Closed

Potential security issue #397

oomb opened this issue Jun 16, 2021 · 2 comments
Labels
bug Something isn't working

Comments

@oomb
Copy link

oomb commented Jun 16, 2021

Hi @knadh,

A potential security issue was found in this project, and it has been reported at https://huntr.dev/bounties/4-knadh/listmonk/.

Could you please spare some time to look into the issue and validate it? The link is private, and will be only accessible to the maintainers of this project.

Thanks!
@oomb oomb added the bug Something isn't working label Jun 16, 2021
@knadh
Copy link
Owner

knadh commented Jun 17, 2021

Confirmed. Will patch this and confirm on the bounty page shortly. Thanks for reporting.

@oomb
Copy link
Author

oomb commented Jun 18, 2021

Can you please update this as a valid report on huntr.dev?

@knadh knadh closed this as completed in 5988ea3 Jun 19, 2021
sparklive added a commit to sparklive/listmonk that referenced this issue Jun 23, 2021
@sparklive
Merge pull request #1 from knadh/master
353fb79 
Sanitize media upload filenames. Closes knadh#397.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@knadh @oomb