Keep reporting nginx path traversal as a warning for now ...

This commit is contained in:
Alexandre Aubin 2020-04-03 04:39:06 +02:00 committed by GitHub
parent 98ff1ad323
commit 7095e096bf
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -428,7 +428,7 @@ class App():
nginxconf = [] nginxconf = []
for location in find_path_traversal_issue(nginxconf): for location in find_path_traversal_issue(nginxconf):
print_error( print_warning(
"The nginx configuration (especially location %s) " "The nginx configuration (especially location %s) "
"appears vulnerable to path traversal issues as explained in\n" "appears vulnerable to path traversal issues as explained in\n"
" https://www.acunetix.com/vulnerabilities/web/path-traversal-via-misconfigured-nginx-alias/\n" " https://www.acunetix.com/vulnerabilities/web/path-traversal-via-misconfigured-nginx-alias/\n"