shahondin1624/Mitgliederverwaltung
Public Access
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 16 Wiki Activity

Temp file permissions too permissive in export/import services #169

New Issue
Closed
opened 2026-04-10 16:04:01 +02:00 by shahondin1624 · 0 comments
shahondin1624 commented 2026-04-10 16:04:01 +02:00
Owner
Copy Link
Copy Source

Severity: MEDIUM

Location

lib/Service/EncryptedExportService.php:114-164, lib/Service/BundleImportService.php:309-351

Description

Both services create temporary files with tempnam(). While finally blocks clean up the files, a race condition exists: between file_put_contents and unlink, another process could read sensitive exported data from the temp directory.

Recommendation

Set restrictive permissions on temp files (chmod 0600) immediately after creation.

## Severity: MEDIUM ## Location `lib/Service/EncryptedExportService.php:114-164`, `lib/Service/BundleImportService.php:309-351` ## Description Both services create temporary files with `tempnam()`. While `finally` blocks clean up the files, a race condition exists: between `file_put_contents` and `unlink`, another process could read sensitive exported data from the temp directory. ## Recommendation Set restrictive permissions on temp files (`chmod 0600`) immediately after creation.
shahondin1624 added the backendsecuritypriority:medium labels 2026-04-10 16:04:01 +02:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
backend
Backend / PHP work
 bug
Bug report
 database
Database migrations and schema
 documentation
Documentation
 enhancement
Enhancement or improvement
 epic
Epic / feature-group issues
 frontend
Frontend / Vue.js work
 integration
Nextcloud integrations (Calendar, Contacts, Files)
 priority:high
High priority
 priority:low
Low priority
 priority:medium
Medium priority
 security
Security-related work
 testing
Tests and test infrastructure
No Label backend priority:medium security
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
shahondin1624
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: shahondin1624/Mitgliederverwaltung#169
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?