mirror of
https://github.com/cloudpanel-io/cloudpanel-ce.git
synced 2026-04-05 20:31:58 +02:00
basic user with root privilege sftp #206
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @paulobeneton on 7/26/2024
CloudPanel version(s) affected
2.4.2
Description
I connected via ssh through filezilla.
It connects to the user folder correctly.
However, when I type in the / address, it takes me to the server's default folder. I can see all the root user folders.
/home I can see the owner's folders clp, root, mysql

How to reproduce
Create a website on cloudpanel.
Get the sftp connection credentials
Connect to sftp using filezilla or another ftp program.
In the directory, try to access /, which is a folder above the user directory.

Possible Solution
Do not allow the user to have access to folders that do not belong to them and especially to root.
Additional Context
No response