[wp-trac] [WordPress Trac] #46742: Path Disclosure issue via Media Uploader

[WordPress Trac]

#46742: Path Disclosure issue via Media Uploader
--------------------------+----------------------
 Reporter:  chitran       |       Owner:  (none)
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  Media         |     Version:  5.1
 Severity:  minor         |  Resolution:  invalid
 Keywords:                |     Focuses:
--------------------------+----------------------
Changes (by joemcgill):

 * status:  new => closed
 * resolution:   => invalid
 * milestone:  Awaiting Review =>


Comment:

 I can't reproduce this error so I suspect that this is a server
 misconfiguration or the result of having debug constants set in your `wp-
 config.php` file or by some other plugin.

 See the [https://make.wordpress.org/core/handbook/reporting-security-
 vulnerabilities/ Security FAQ]:
 > ''' Why are there path disclosures when directly loading certain
 files?'''
 > This is a server configuration problem. Never enable `display_errors` on
 a production site.

 Additionally, when you created this ticket:
 > '''Do not report potential security vulnerabilities here.''' See the
 [https://make.wordpress.org/core/handbook/reporting-security-
 vulnerabilities/ Security FAQ] and contact security at wordpress.org.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/46742#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform