Slash in prefix ended in error and path traversal

  • Resolved kjaneczko

    (@kjaneczko)


    4 years, 6 months ago

    Hi,

    I have noticed that adding slash ‘/’ in prefix, e.g. FV-KMS/ ended in errors like:
    Uncaught MpdfException: Unable to create output file: [...]/public_html/wp-content/uploads/woocommerce-pdf-invoices/attachments/2020/FV-KMS/00147-2020.pdf in [...]/public_html/wp-content/plugins/woocommerce-pdf-invoices/vendor/mpdf/mpdf/mpdf.php:9442

    When I have changed it to FV-KMS- it works great.

    Next thing is when I have added ‘../’, e.g. ../FV-KMS- to prefix then the invoice was saved in attachments folder instead of 2020 folder.

    Wordpress 5.4.1
    WooCommerce 4.0.1
    WooCommerce PDF Invoices 3.0.11

    Greetings,
    Kacper

Viewing 1 replies (of 1 total)
  • Plugin Author Bas Elbers

    (@baaaaas)

    Thanks Kacper for letting us know. We have fixed the issue by only allowing certain characters. The fix will be added in the next update.

Viewing 1 replies (of 1 total)
  • The topic ‘Slash in prefix ended in error and path traversal’ is closed to new replies.

Tags