[Security] - path traversal vulnerability - limited to png files

[Security] - path traversal vulnerability - limited to png files

fusiondirectory/geticon.php? path traversal vulnerabilities under CWE-35: here

The vulnerability arises from using unsanitized user input ($_GET[‘icon’]) in a call to a function that results in reading a file.

The call stack includes

-findThemeIcon()

-FindIcon()

-FindIconHelper()

-LookupIcon()

-file_exists()

changed milestone to %FusionDirectory 1.5

added PJ1802-0188 label

assigned to @tdockx

created branch 6363-security-path-traversal-vulnerability-limited-to-png-files to address this issue

added Fixed Security labels

closed

added To Be Tested label

removed To Be Tested label

added test done label

removed Fixed label