WordPress.org
Get WordPress

Make WordPress Core

Opened 14 years ago

Closed 14 years ago

Last modified 14 years ago

#23077 closed defect (bug) (invalid)

There is a path disclosure vulnerbility in your new version

Reported by: coolwashere Owned by:
Priority: normal Milestone:
Component: Template Version:
Severity: normal Keywords:
Cc: Focuses:

Description

you can check the site over here
​http://tafeio.com//wp-includes/category-template.php

Change History (3)

#1 @nacin
14 years ago

  • Milestone Awaiting Review
  • Resolution → invalid
  • Status new → closed

​http://codex.wordpress.org/FAQ_Security#Why_are_there_path_disclosures_when_directly_loading_certain_files.3F

Why are there path disclosures when directly loading certain files?
This is considered a server configuration problem. Never enable display_errors on a production site.

Additionally, when you created this ticket:

Do not report potential security vulnerabilities here. Read the Security FAQ and email us at security@….

#2 @SergeyBiryukov
14 years ago

  • Severity major → normal
  • Version trunk

#3 @dimadin
14 years ago

  • Keywords has-patch removed
Note: See TracTickets for help on using tickets.