local file include on mistral-dashboard
Bug #1933061 reported by
Chung Phan
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Mistral |
New
|
Undecided
|
Unassigned |
Bug Description
User using mistral dashboard can get any content of file on horizon server
Reproduce:
- Workflow -> Workbooks -> Create workbook -> chose Direct Input
write any file content example : "/etc/passwd" or "file://etc/passwd"
- Also in /mistral/
See a image for more infomation
It a bug of mistralclient when using on horizon at line https:/
To post a comment you must log in.