fix CVE-2022-41417.

tree-chtsec · tree-chtsec · commit 9a8a7e3d5601 · 2022-10-24T13:36:54.000+08:00
But GetDirectory() will create folder if not exists by design. The
problem exists in ~/App_Data/Files/&lt;here&gt; despite this fix.
diff --git a/BlogEngine/BlogEngine.Core/Providers/FileSystemProviders/XmlFileSystemProvider.cs b/BlogEngine/BlogEngine.Core/Providers/FileSystemProviders/XmlFileSystemProvider.cs
@@ -28,7 +28,7 @@ private static string BlogAbsolutePath(string VirtualPath)
         private static string RelativeFilePath(string VirtualPath)
         {
             VirtualPath = VirtualPath.Replace("//","/").Trim();
-            if (VirtualPath.ToLower().Contains(FileContainerRoot.ToLower()))
+            if (VirtualPath.ToLower().Contains(FileContainerRoot.ToLower()+"/") || VirtualPath.ToLower() == FileContainerRoot.ToLower())
                 return VirtualPath;
 
             // ex: Oct 18 2012, added this to handle the case on the File Manager where if

Original file line number	Diff line number	Diff line change
`@@ -28,7 +28,7 @@ private static string BlogAbsolutePath(string VirtualPath)`
`28`	`28`	`private static string RelativeFilePath(string VirtualPath)`
`29`	`29`	`{`
`30`	`30`	`VirtualPath = VirtualPath.Replace("//","/").Trim();`
`31`		`- if (VirtualPath.ToLower().Contains(FileContainerRoot.ToLower()))`
	`31`	`+ if (VirtualPath.ToLower().Contains(FileContainerRoot.ToLower()+"/") \|\| VirtualPath.ToLower() == FileContainerRoot.ToLower())`
`32`	`32`	`return VirtualPath;`
`33`	`33`
`34`	`34`	`// ex: Oct 18 2012, added this to handle the case on the File Manager where if`