FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

lshell -- Shell autocomplete reveals forbidden directories

Affected packages
lshell < 0.9.18

Details

VuXML ID 07d04eef-d8e2-11e6-a071-001e67f15f5a
Discovery 2015-07-25
Entry 2018-07-27

lshell reports:

The autocomplete feature allows users to list directories, while they do not have access to those paths (issue #109).

References

URL https://github.com/ghantoos/lshell/issues/109