[wp-trac] [WordPress Trac] #23077: There is a path disclosure vulnerbility in your new version

[WordPress Trac]

#23077: There is a path disclosure vulnerbility in your new version
--------------------------+----------------------
 Reporter:  coolwashere   |       Owner:
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  Template      |     Version:  trunk
 Severity:  major         |  Resolution:  invalid
 Keywords:  has-patch     |
--------------------------+----------------------
Changes (by nacin):

 * status:  new => closed
 * resolution:   => invalid
 * milestone:  Awaiting Review =>


Comment:

 http://codex.wordpress.org/FAQ_Security#Why_are_there_path_disclosures_when_directly_loading_certain_files.3F
 > ''' Why are there path disclosures when directly loading certain
 files?'''
 > This is considered a server configuration problem. Never enable
 display_errors on a production site.

 Additionally, when you created this ticket:
 > '''Do not report potential security vulnerabilities here.''' Read the
 Security FAQ and email us at security at wordpress.org.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/23077#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software