Full Disclosure mailing list archives

Re: Full Disclosure - Responsive File Manager

From: Henri Salo <henri () nerv fi>
Date: Sat, 11 Aug 2018 19:52:32 +0300

On Wed, Aug 08, 2018 at 01:43:34PM -0300, Silton Renato wrote:

* System affected : Responsive Filemanager
* Software Version : 9.13.1 (other versions may also be affected).
* Impact : Get sensitive files from the server.


This seems to be fixed in RFM 9.13.3 according to changelog.txt "fix
vulnerability that permits to see server files", which was released 2018-08-04.
Didn't manually verify.

-- 
Henri Salo

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Current thread:

Full Disclosure - Responsive File Manager Silton Renato (Aug 08)
- Re: Full Disclosure - Responsive File Manager Henri Salo (Aug 13)
  - Re: Full Disclosure - Responsive File Manager Silton Renato (Aug 21)