[Geoserver-devel] [jira] (GEOS-5707) External entity reference in WFS POST request allows access to host filesystem

Wed, 13 Mar 2013 01:44:47 -0700

Issue Type: Bug Bug
Affects Versions: 2.3-RC1
Assignee: Davide Savazzi
Components: WFS
Created: 13/Mar/13 3:41 AM
Description:

With a prepared WFS POST request, it is possible to access sensitive files on the server and include them in the server response.
Project: GeoServer
Priority: Major Major
Reporter: Davide Savazzi
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira 
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_mar
_______________________________________________
Geoserver-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Reply via email to