Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Issue regarding determine uploaded file types on MIME #94

Open
nevercodecorrect opened this issue Feb 18, 2024 · 2 comments
Open

Issue regarding determine uploaded file types on MIME #94

nevercodecorrect opened this issue Feb 18, 2024 · 2 comments
Labels
question Further information is requested stale Awaiting input from creator for prolonged time period

Comments

@nevercodecorrect
Copy link

Hi, i played a bit with the project and noticed one potential issue. In this function, the mime type could be manipulated by remote user, hence he could upload any file with a manipulated MIME header. The description of such potential vulnerability is here. One could use magic code to check the uploaded file type rather than rely on the MIME or extension
@nevercodecorrect nevercodecorrect added the question Further information is requested label Feb 18, 2024
@github-actions GitHub Actions
Copy link

This issue is stale because it has been open 90 days with no activity. Remove stale label or comment or this will be closed in 14 days

@github-actions github-actions bot added the stale Awaiting input from creator for prolonged time period label May 19, 2024
@nevercodecorrect
Copy link
Author

Hello, is there any update?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
question Further information is requested stale Awaiting input from creator for prolonged time period
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@nevercodecorrect