adam/Piwigo
1
0 Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-10-30 21:52:00 +01:00
Code Issues 657 Packages Projects Releases Wiki Activity

[security] check MIME type against uploaded files #2210

New Issue
Closed
opened 2026-10-05 01:09:53 +02:00 by adam · 0 comments
adam commented 2026-10-05 01:09:53 +02:00
Owner
Copy link
Copy source

Piwigo sometimes receives a *.jpg file while it is in reality a *.heic file. The user might have thought renaming the file has also converted it's encoding (which is wrong). Sometimes an attacker also renames a file to bypass a first check and then induce specific operation server-side.

Let's add a stronger MIME type check.

Piwigo sometimes receives a *.jpg file while it is in reality a *.heic file. The user might have thought renaming the file has also converted it's encoding (which is wrong). Sometimes an attacker also renames a file to bypass a first check and then induce specific operation server-side. Let's add a stronger MIME type check. <!-- github-sync-id:4303341299 -->
adam closed this issue 2026-10-05 01:09:53 +02:00
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#2210