10207: Vulnerabilities in samples/exemples/demo/help on Third party folders

This issue affects 1 person(s).

252

ID	Project	Category	View Status	Date Submitted	Last Update
10207	Bug reports	Security	public	2016-01-07 14:34	2016-03-16 11:04

Reporter	JeffBxl	Assigned To	c_schmitz
Priority	normal	Severity	minor
Status	closed	Resolution	no change required
Product Version	2.06+

Summary	10207: Vulnerabilities in samples/exemples/demo/help on Third party folders
Description	There regularly vulnerabilities in samples/exemples/demo/help on Third party folders. These files are not yet necessary for application. This can compromise the entire web application. I propose to clean these directories in the final production version ?
Additional Information	See 10206: HTML form with no apparent CSRF protection /limesurvey/third_party/ckeditor/_samples/api.html /limesurvey/third_party/ckeditor/_samples/sharedspaces.html /limesurvey/third_party/ckeditor/_samples/skins.html /limesurvey/third_party/ckeditor/_samples/ui_color.html /limesurvey/third_party/jquery-actual/demo/normal.html
Tags	No tags attached.

Bug heat	252
Complete LimeSurvey version number (& build)	limesurvey206plus-build1512
I will donate to the project if issue is resolved	No
Browser	All
Database type & version	All
Server OS (if known)	All
Webserver software & version (if known)	All
PHP Version	All
Git branch / Pull Request URL

User List	There are no users monitoring this issue.

Date Modified	Username	Field	Change
2016-01-07 14:34	JeffBxl	New Issue
2016-01-07 17:02	DenisChenu	Note Added: 34176
2016-03-16 11:04	c_schmitz	Status	new => closed
2016-03-16 11:04	c_schmitz	Assigned To	=> c_schmitz
2016-03-16 11:04	c_schmitz	Resolution	open => no change required

DenisChenu 2016-01-07 17:02 developer ~34176	No action => no CRSF needed. In 3.0 : it's composed in 2.06/2.5 : really more easy to update whole directory than hacking dir one by one. Can be done.