Repository navigation
Session upload progress filename sanitization #24574
Description
Description
Session upload progress has no sanitization of the filename which allows RCE if let's say there's LFI in the website. One of the criteria is .user.ini/php.ini session.upload_progress.enabled = On, and session.upload_progress.cleanup = Off
PHP Version
PHP 8.5.12 (cli) (built: Oct 19 2026 17:02:46) (NTS gcc x86_64)
Copyright (c) The PHP Group
Built by Fedora Project
Zend Engine v4.5.12, Copyright (c) Zend Technologies
with Zend OPcache v8.5.12, Copyright (c), by Zend Technologies
Operating System
Fedora 44 (Server Edition)
Activity
[-]Session upload progress filename sanitation[/-][+]Session upload progress filename sanitization[/+]