Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-14090 Predictable filenames expose contact data via Google
  3. CRM-14091

Report to site admin if CiviCRM upload directories are unprotected

          Details

          • Type: Sub-task
          • Status: Done/Fixed
          • Priority: Trivial
          • Resolution: Fixed/Completed
          • Affects Version/s: 4.4.3
          • Fix Version/s: 4.4.4
          • Component/s: Core CiviCRM
          • Security Level: Security - Published
          • Labels:
            None

            Description

            Attempt to retrieve file listings of public directories, report to admin if known files are returned in the result.

            Attempt to retrieve "protected" files (currently protected only by default .htaccess setup) and report to admin if known files are returned.

              Attachments

                Activity

                  People

                  • Assignee:
                    xurizaemon Chris Burgess
                    Reporter:
                    xurizaemon Chris Burgess
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    2 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: