Bug 11661

Summary: edithelp.pl can be used to write arbitrary files to the server
Product: Koha Reporter: Galen Charlton <gmcharlt>
Component: Architecture, internals, and plumbingAssignee: Galen Charlton <gmcharlt>
Status: CLOSED FIXED QA Contact: Testopia <testopia>
Severity: critical    
Priority: P1 - high CC: katrin.fischer, m.de.rooy
Version: Main   
Hardware: All   
OS: All   
Change sponsored?: --- Patch complexity: Small patch
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:

Comment 1 Galen Charlton 2014-02-01 00:58:30 UTC
Similarly, the 'modify' action should be checked.
Comment 4 Katrin Fischer 2014-02-02 10:36:55 UTC
I can't edit the help on my Koha because of a problem with file permissions - I am not sure how to set them correctly. It's a dev installation (not gitified). Can I get a hint?
Comment 6 Marcel de Rooy 2014-02-06 09:41:41 UTC
(In reply to Katrin Fischer from comment #4)
> I can't edit the help on my Koha because of a problem with file permissions
> - I am not sure how to set them correctly. It's a dev installation (not
> gitified). Can I get a hint?

Katrin
To get it to write to /tmp, I had to count the number of directories upward and add a few ..-s in order to get to the root of the server and than to /tmp.
Could that be your problem?
Comment 8 Galen Charlton 2014-02-07 01:42:04 UTC
Pushed to master.  Thanks, Chris!
Comment 9 Galen Charlton 2014-02-07 02:05:43 UTC
Included in the following releases: 3.8.23, 3.10.13, 3.12.10, and 3.14.3.