[
https://issues.apache.org/jira/browse/IO-484?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14659919#comment-14659919
]
Kristian Rosenvold commented on IO-484:
---------------------------------------
Additional fix in r1694480
> FilenameUtils should handle embedded null bytes
> -----------------------------------------------
>
> Key: IO-484
> URL: https://issues.apache.org/jira/browse/IO-484
> Project: Commons IO
> Issue Type: Bug
> Components: Utilities
> Affects Versions: 2.4
> Reporter: Kristian Rosenvold
> Assignee: Kristian Rosenvold
> Fix For: 2.5
>
>
> embedding nulls in filenames exposes injection vectors if the application
> passes unsanitized data to some functions in FileNameUtils
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
