Feeling Lucky
RTC
Unit/System Tests
PR-5.3-dev
[#45115] - [5.3] System test in media manager to prevent a rename
- Fixed in Code Base
- 14 Mar 2025
- Medium
- Build: 5.3-dev
- # 45115
- Diff
- Digital-Peak:rename
User tests: Successful: Unsuccessful:
Summary of Changes
Pull request to actually check if an image can be renamed to a different one with a PHP file extension.
See https://developer.joomla.org/security-centre/961-20250301-core-malicious-file-uploads-via-media-managere-malicious-file-uploads-via-media-manager.html for more details.
| Status | New | ⇒ | Pending |
joomla-cms-bot
- | Category | ⇒ | JavaScript Unit Tests |
| Labels |
Added:
Unit/System Tests
PR-5.3-dev
|
||
richard67
- comment
- 12 Mar 2025
I have tested this item ✅ successfully on c2f0fc4
Verified in drone logs that the new system test was run, and reviewed that it tests the recent security fix.
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/45115.
| Status | Pending | ⇒ | Ready to Commit |
richard67
- comment
- 12 Mar 2025
RTC
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/45115.
| Status | Ready to Commit | ⇒ | Fixed in Code Base |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2025-03-14 10:54:18 |
| Closed_By | ⇒ | bembelimen | |
| Labels |
Added:
RTC
|
||
bembelimen
- comment
- 14 Mar 2025
Thx
I have tested this item ✅ successfully on c2f0fc4
Perfect, thank you!
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/45115.