Hauv tsev qiv ntawv , uas muab handlers los tiv thaiv los ntawm kev hloov cov ntaub ntawv hauv "Phar" hom ntawv, (), uas tso cai rau koj los hla txoj cai deserialization tiv thaiv los ntawm kev hloov ".." cov cim hauv txoj kev. Piv txwv li, tus neeg tawm tsam tuaj yeem siv qhov URL zoo li "phar:///path/bad.phar/../good.phar" rau kev tawm tsam, thiab lub tsev qiv ntawv yuav hais txog lub hauv paus lub npe "/path/good.phar" thaum kev kuaj xyuas, txawm hais tias thaum lub sijhawm ua haujlwm ntxiv ntawm txoj hauv kev Cov ntaub ntawv "/path/bad.phar" yuav raug siv.
Lub tsev qiv ntawv tau tsim los ntawm cov neeg tsim ntawm CMS TYPO3, tab sis kuj tseem siv rau hauv Drupal thiab Joomla cov haujlwm, uas ua rau lawv muaj kev cuam tshuam rau qhov tsis zoo. Qhov teeb meem kho hauv kev tshaj tawm . Qhov project Drupal tau kho qhov teeb meem hauv kev hloov tshiab 7.67, 8.6.16 thiab 8.7.1. Hauv Joomla qhov teeb meem tshwm sim txij li version 3.9.3 thiab tau kho hauv kev tso tawm 3.9.6. Txhawm rau kho qhov teeb meem hauv TYPO3, koj yuav tsum hloov kho PharStreamWapper lub tsev qiv ntawv.
Ntawm qhov ua tau zoo, qhov muaj qhov tsis zoo hauv PharStreamWapper tso cai rau Drupal Core cov neeg siv nrog 'Administer ntsiab' tso cai rau upload cov ntaub ntawv phhar phem thiab ua rau PHP code uas muaj nyob rau hauv nws yuav tsum tau ua raws li qhov tseeb ntawm phar archive. Nco qab tias lub ntsiab lus ntawm "Phar deserialization" nres yog tias thaum tshawb xyuas cov ntaub ntawv pabcuam thauj khoom ntawm PHP function file_exists(), qhov haujlwm no tau txais cov metadata los ntawm Phar cov ntaub ntawv (PHP Archive) thaum ua cov kev pib nrog "phar:" . Nws tuaj yeem hloov pauv cov ntaub ntawv phar ua duab, txij li file_exists() muaj nuj nqi txiav txim siab hom MIME los ntawm cov ntsiab lus, thiab tsis yog txuas ntxiv.
Tau qhov twg los: opennet.ru