Vendor
zanllp
2 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
High 7.5
Infinite Image Browsing Resolves Paths With normpath, Allowing Symlink Escape From Scanned Directories
to_abs_path in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links. A symlink placed inside a scanned directory therefore satisfies the containment comparison performed by i…
-
High 7.5
Infinite Image Browsing is_path_trusted Prefix Comparison Omits the Trailing Path Separator
is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswith(parent_path), without appending a path separator. A directory whose name merely begins with an allowed path therefore satisfies the co…