search

nextcloud / gallery

DEPRECATED Gallery app was replaced by Photos
https://github.com/nextcloud/photos
GNU Affero General Public License v3.0
109 stars 58 forks source link

Deletion of an image removes a directory tree #568

Open Marco-Jacobs opened 4 years ago

Marco-Jacobs commented 4 years ago

Bug report

Steps to reproduce

  1. create a directory structure like "/test1/? test2/test3/"
  2. put an image in test3
  3. switch to gallery view and navigate to the image
  4. open the image and delete it

Expected behaviour

the image should be deleted

Actual behaviour

The directory test1 gets deleted. It seems that the directory in wich the one with the question mark is gets deleted. Maybe an SQL injection or similar?

Server configuration

Operating system: Ubuntu Server 18.04 Web server: Apache Database: MySQL PHP version: 7.3

Nextcloud configuration

Nextcloud version: 17.0.2 Updated from an older installation or fresh install: updated but happened in older versions too