starred/jellyfin-jellyfin-1
1
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin.git synced 2025-12-20 15:55:25 +03:00
Code Issues Packages Projects Releases Wiki Activity
Files
f61d18612b2e6c6e9a5dd4510331ac8d89a337d5
jellyfin-jellyfin-1/Jellyfin.Api/Controllers/HlsSegmentController.cs
Erwin de Haan f61d18612b Fix directory traversal in the HlsSegmentController in a fairly rudimentary but working way. 
GHSL-2021-050: Issue 1,2,3 Arbitrary file read and directory traversal.
The segment id's can probably just be verified to be an actual ID or to not contain any forward or backward slashes
2021-03-20 01:14:59 +01:00

9.3 KiB
Raw Blame History

View Raw
Reference in New Issue View Git Blame Copy Permalink