[jira] [Created] (FLINK-20916) Typo in test for CVE-2020-17519

[Shang Yuanchun (Jira)]

nate created FLINK-20916:
----------------------------

             Summary: Typo in test for CVE-2020-17519
                 Key: FLINK-20916
                 URL: https://issues.apache.org/jira/browse/FLINK-20916
             Project: Flink
          Issue Type: Bug
          Components: Runtime / REST
            Reporter: nate


 

The testGetJobManagerCustomLogsExistingButForbiddenFileWithObfuscatedPath test for CVE-2020-17519 Path Traversal has a typo that causes it to inaccurately test for the vuln. 

It uses for format string "..%%252%s" when it should be "..%%252f%s".



--
This message was sent by Atlassian Jira
(v8.3.4#803005)