[
https://issues.apache.org/jira/browse/KYLIN-6105?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18121782#comment-18121782
]
liyang commented on KYLIN-6105:
-------------------------------
Fixed by resolving and normalizing both the requested path and the project
backup root before deletion, requiring strict descendant containment, and
restricting parent cleanup to the allowed backup root. Added regression
coverage for root deletion, traversal, and sibling-prefix paths.
> Potential file deletion issue in metadata backup management
> -----------------------------------------------------------
>
> Key: KYLIN-6105
> URL: https://issues.apache.org/jira/browse/KYLIN-6105
> Project: Kylin
> Issue Type: Bug
> Reporter: liyang
> Priority: Major
>
> Security issue reported for Apache Kylin. This public issue tracks
> remediation; technical details remain in the private ASF security process.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
