shenyu icon indicating copy to clipboard operation
shenyu copied to clipboard

[risk] Path traversal in ShenyuPluginPathBuilder

Open BrdgYin opened this issue 1 year ago • 1 comments

Question

/**
 * Gets plugin file.
 *
 * @param path the path
 * @return the plugin jar file.
 */
public static File getPluginFile(final String path) {
    String pluginPath = getPluginPath(path);
    return new File(pluginPath);
}

BrdgYin avatar Aug 01 '24 14:08 BrdgYin

can you fix it? thanks

yu199195 avatar Aug 07 '24 02:08 yu199195