https://bugs.kde.org/show_bug.cgi?id=453248

--- Comment #1 from Nagy Tibor <xnagyti...@gmail.com> ---
I went through most Krita features, I found more places vulnerable to these
path traversals:
- Gradients (.svg)
- Palettes (.kpl)
- Predefined image sizes (.predefinedimage)
- Author profiles (.authorinfo)
- Workspaces (.kws)
- Resource bundles (.bundle)

Repro is the same everywhere:
- Create new something...
- Enter a relative path including "../../" as the name
- Save

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to