Changeset 2948908

Timestamp:

08/07/2023 08:52:05 PM (2 years ago)

Author:

grimmdude

Message:

4.9 - Address file deletion vulnerability.

Location:

all-in-one-favicon/trunk

Files:

• all-in-one-favicon.php (modified) (2 diffs)
• includes/aio-favicon-backend.php (modified) (1 diff)
• readme.txt (modified) (1 diff)

all-in-one-favicon/trunk/all-in-one-favicon.php

@@ -7 +7 @@
  * Plugin URI: http://www.techotronic.de/plugins/all-in-one-favicon/
  * Description: All in one Favicon management. Easily add a Favicon to your site and the WordPress admin pages. Complete with upload functionality. Supports all three Favicon types (ico,png,gif)
- * Version: 4.7
+ * Version: 4.8
  * Author: Arne Franken
  * Author URI: https://appsumo.com/tools/wordpress/?utm_source=sumo&utm_medium=wp-widget&utm_campaign=all-in-one-favicon
@@ -24 +24 @@
 
 // define constants
-define('AIOFAVICON_VERSION', '4.7');
+define('AIOFAVICON_VERSION', '4.8');
 
 if (!defined('AIOFAVICON_PLUGIN_BASENAME')) {

all-in-one-favicon/trunk/includes/aio-favicon-backend.php

@@ -364 +364 @@
   function deleteFile($faviconName) {
     $url = $this->aioFaviconSettings[$faviconName];
+
+    // Sanitize the file path
+    $url = str_replace(['../', '..'], '', $url);
+
     if ($url != '') {
       $uploads = wp_upload_dir();

all-in-one-favicon/trunk/readme.txt

@@ -93 +93 @@
 
 == Changelog ==
+= 4.8 (2023-08-07) =
+* Address file deletion vulnerability.
 
 = 4.7 (2018-07-23) =