1339808 - directory traversal

Status: RESOLVED INVALID

(Core :: General, defect)

Description

[Sanit Bhiwani]

Attachment: 1.png

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0
Build ID: 20170213070939

Steps to reproduce:

HOW To Reproduce this vulenrability : 

1-> visit this URLs
http://releases.mozilla.com/pub/firefox/releases/

http://releases.mozilla.com/pub/firefox/




2-> its containg list for directory files on that location 


Actual results:

We can access other directories from parent directory and vise-versa.


Expected results:

It should Process URI requests that do not result in a file request

Comment 1

[Tooru Fujisawa [:arai]]

those directories are supposed to be public.

Comment 2

[Firefox Bug Husbandry Bot]

Moving from Core::Untriaged to Core::General https://bugzilla.mozilla.org/show_bug.cgi?id=1407598