KVE-2018-366, 379, 397 취약점 수정

2018-06-05 11:33:12 +09:00
parent a069ec6c93
commit d7cf0ce39d
6 changed files with 16 additions and 13 deletions
--- a/lib/common.lib.php
+++ b/lib/common.lib.php
@ -3478,7 +3478,7 @@ function is_include_path_check($path='', $is_input='')
                return false;
            }

-            if( preg_match('/\/data\/(file|editor)\/[A-Za-z0-9_]{1,20}\//', $path) ){
+            if( preg_match('/\/data\/(file|editor|qa|cache|member|member_image|session|tmp)\/[A-Za-z0-9_]{1,20}\//i', $path) ){
                return false;
            }
        }