brandonkelly 7 months ago
parent
commit
3769a7729f
No known key found for this signature in database GPG Key ID: 5E86D0CED64C7093
  1. 4
      CHANGELOG.md
  2. 4
      bootstrap/bootstrap.php

4
CHANGELOG.md

@ -1,5 +1,9 @@
# Release Notes for Craft CMS 3.x
## Unreleased
- Fixed an RCE vulnerability.
## 3.9.13 - 2024-04-03
- The Craft 4 Upgrade utility now shows the upgrade status and latest compatible version for abandoned plugins.

4
bootstrap/bootstrap.php

@ -27,12 +27,12 @@ if (!isset($appType) || ($appType !== 'web' && $appType !== 'console')) {
// Determine the paths
// -----------------------------------------------------------------------------
$findConfig = function($constName, $argName) {
$findConfig = function($constName, $argName) use ($appType) {
if (defined($constName)) {
return constant($constName);
}
if (!empty($_SERVER['argv'])) {
if ($appType === 'console' && !empty($_SERVER['argv'])) {
foreach ($_SERVER['argv'] as $key => $arg) {
if (strpos($arg, "--{$argName}=") !== false) {
$parts = explode('=', $arg);

Loading…
Cancel
Save