ThatGuyJack/nginx-proxy-manager
1
0
Fork 0
mirror of https://github.com/NginxProxyManager/nginx-proxy-manager.git synced 2025-06-17 17:56:27 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix CVE-2024-46256 and CVE-2024-46257

Browse Source 
- Schema validate against bad domain characters
- Integration test for CVE POC examples
- Cypress rewrite of plugins for file upload
This commit is contained in:
Jamie Curnow
2024-10-11 11:21:22 +10:00
parent 7c97516de6
commit c39d5433bc
19 changed files with 358 additions and 180 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
backend/schema/common.json
View File

@ -76,7 +76,7 @@
"uniqueItems": true,
"items": {
"type": "string",
"pattern": "^(?:\\*\\.)?(?:[^.*]+\\.?)+[^.]$"
"pattern": "^[^&| @!#%^();:/\\\\}{=+?<>,~`'\"]+$"
}
},
"enabled": {

9
backend/schema/components/error.json Normal file
View File

@ -0,0 +1,9 @@
{
"type": "object",
"description": "Error",
"properties": {
"error": {
"$ref": "./error-object.json"
}
}
}

20
backend/schema/paths/nginx/certificates/post.json
View File

@ -72,6 +72,26 @@
}
}
}
},
"400": {
"description": "400 response",
"content": {
"application/json": {
"examples": {
"default": {
"value": {
"error": {
"code": 400,
"message": "Domains are invalid"
}
}
}
},
"schema": {
"$ref": "../../../components/error.json"
}
}
}
}
}
}

39
backend/schema/paths/nginx/certificates/validate/post.json
View File

@ -50,6 +50,42 @@
"certificate_key": true
}
}
},
"schema": {
"type": "object",
"additionalProperties": false,
"required": ["certificate", "certificate_key"],
"properties": {
"certificate": {
"type": "object",
"additionalProperties": false,
"required": ["cn", "issuer", "dates"],
"properties": {
"cn": {
"type": "string"
},
"issuer": {
"type": "string"
},
"dates": {
"type": "object",
"additionalProperties": false,
"required": ["from", "to"],
"properties": {
"from": {
"type": "integer"
},
"to": {
"type": "integer"
}
}
}
}
},
"certificate_key": {
"type": "boolean"
}
}
}
}
}
@ -67,6 +103,9 @@
}
}
}
},
"schema": {
"$ref": "../../../../components/error.json"
}
}
}

2
backend/schema/paths/nginx/dead-hosts/hostID/disable/post.json
View File

@ -50,7 +50,7 @@
}
},
"schema": {
"$ref": "../../../../../components/error-object.json"
"$ref": "../../../../../components/error.json"
}
}
}

2
backend/schema/paths/nginx/dead-hosts/hostID/enable/post.json
View File

@ -50,7 +50,7 @@
}
},
"schema": {
"$ref": "../../../../../components/error-object.json"
"$ref": "../../../../../components/error.json"
}
}
}

2
backend/schema/paths/nginx/proxy-hosts/hostID/disable/post.json
View File

@ -50,7 +50,7 @@
}
},
"schema": {
"$ref": "../../../../../components/error-object.json"
"$ref": "../../../../../components/error.json"
}
}
}

2
backend/schema/paths/nginx/proxy-hosts/hostID/enable/post.json
View File

@ -50,7 +50,7 @@
}
},
"schema": {
"$ref": "../../../../../components/error-object.json"
"$ref": "../../../../../components/error.json"
}
}
}

2
backend/schema/paths/nginx/redirection-hosts/hostID/disable/post.json
View File

@ -50,7 +50,7 @@
}
},
"schema": {
"$ref": "../../../../../components/error-object.json"
"$ref": "../../../../../components/error.json"
}
}
}

2
backend/schema/paths/nginx/redirection-hosts/hostID/enable/post.json
View File

@ -50,7 +50,7 @@
}
},
"schema": {
"$ref": "../../../../../components/error-object.json"
"$ref": "../../../../../components/error.json"
}
}
}

2
backend/schema/paths/nginx/streams/streamID/disable/post.json
View File

@ -50,7 +50,7 @@
}
},
"schema": {
"$ref": "../../../../../components/error-object.json"
"$ref": "../../../../../components/error.json"
}
}
}

2
backend/schema/paths/nginx/streams/streamID/enable/post.json
View File

@ -50,7 +50,7 @@
}
},
"schema": {
"$ref": "../../../../../components/error-object.json"
"$ref": "../../../../../components/error.json"
}
}
}