[wp-trac] [WordPress Trac] #44700: Full path disclosure on rss-functions.php

WordPress Trac noreply at wordpress.org
Thu Aug 2 07:44:00 UTC 2018


#44700: Full path disclosure on rss-functions.php
-----------------------------+------------------------
 Reporter:  damithruwan1234  |       Owner:  (none)
     Type:  defect (bug)     |      Status:  closed
 Priority:  normal           |   Milestone:
Component:  General          |     Version:
 Severity:  normal           |  Resolution:  duplicate
 Keywords:                   |     Focuses:
-----------------------------+------------------------
Changes (by swissspidy):

 * status:  new => closed
 * resolution:   => duplicate
 * milestone:  Awaiting Review =>


Comment:

 Hey there

 This has come up many times before, for example in #36177, #30806, and
 most recently in #44663.

 Path disclosure is a server configuration problem. Never enable
 `display_errors` on a production site. See
 [https://make.wordpress.org/core/handbook/testing/reporting-security-
 vulnerabilities/ Security FAQ].

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/44700#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list