https://nvd.nist.gov/vuln/detail/CVE-2023-34561

2023-09-15 22:27:07 -07:00 · 2023-09-15 22:27:07 -07:00 · fd88a4e374
commit fd88a4e374
parent 64b65ba3ce
4 changed files with 28 additions and 5 deletions
--- a/src/endpoints/levels/upload_level.rs
+++ b/src/endpoints/levels/upload_level.rs
@ -107,6 +107,11 @@ pub fn upload_level(input: Form<FormUploadLevel>) -> status::Custom<&'static str
        return status::Custom(Status::Ok, "-1")
    }

+    // ACE vulnerability check
+    if let Some(_ace_object) = level_objects.iter().find(|obj| obj.item_block_id() < Some(0) || obj.item_block_id() > Some(1100)) {
+        return status::Custom(Status::Ok, "-1")
+    }
+
    // data base 🤣😁
    use crate::models::{Level, NewLevel};