Open dk4trin opened 1 year ago
Thanks a lot for the report! Indeed I can reproduce. I fixed it in our internal repo (by adding a /
) and I hope I'll find time to update GitHub too.
There is no security impact is low as far as I can tell:
Best regards, Arthur
Hello Team,
In the deploy files there is a bad configuration in the nginx alias where it is possible to perform a traversal path to access files on the server running the QA-Board. An attacker can use this to scour files on the server that could compromise QA-Board users/customers.
For the technique to be applicable, the following conditions must be met:
From the procedures of the deploy steps I was able to carry out the proof of concept:
Steps to Reproduce
I apologize if this is of no use to you.
Best Regards, dk4trin.