Trusted-Directory Bypass via Path Traversal

if you enable secrity .$trusted_dir is an array of all directories that are considered trusted. Trusted directories are where you keep php scripts that are executed directly from the templates . the attackers can use …/ to bypass the dir ,if they can editing the templates, they read any file they want. just use {include “file:./…/…/…/…/…/etc/passwd”} The text was updated successfully, but these errors were encountered: All reactions