Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] 文件管理器删除文件名带有 "(", ")" 符号时报错 #3657

Closed
DongShaoNB opened this issue Jan 19, 2024 · 6 comments
Closed

Comments

@DongShaoNB
Copy link

联系方式

No response

1Panel 版本

1.9.4

问题描述

文件管理器删除文件名带有 "(", ")" 符号时报错

重现步骤

删除文件名带有 "(", ")" 符号的文件

期待的正确结果

No response

相关日志输出

服务内部错误: error : exit status 2, output: bash: -c:行1: 未预期的符号“(”附近有语法错误 bash: -c:行1: `mv /opt/mcserver/地图(空中).zip /.1panel_clash/_1p_file_1p_opt_1p_mcserver_1p_地图(空中).zip_p_37639996_1705659439'

附加信息

No response

@wanghe-fit2cloud
Copy link
Member

wanghe-fit2cloud commented Jan 19, 2024

麻烦提供一下文件全名(放置在反引号 `` 内)

例:test"(", ")"

@DongShaoNB
Copy link
Author

麻烦提供一下文件全名(放置在反引号 `` 内)

例:test"(", ")"

主城地图(空中).zip

@igophper
Copy link
Contributor

这个地方的问题有点严重呀,存在命令注入的风险

@igophper
Copy link
Contributor

这个地方的问题有点严重呀,存在命令注入的风险

暂时只修复了这个问题,其他地方执行命令的时候都要进行处理。否则可能存在命令注入风险

@wanghe-fit2cloud
Copy link
Member

这个地方的问题有点严重呀,存在命令注入的风险

暂时只修复了这个问题,其他地方执行命令的时候都要进行处理。否则可能存在命令注入风险

感谢支持。

@wanghe-fit2cloud
Copy link
Member

v1.9.5 版本已发布。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants