Security concern: recent update creates test.sh

  • Resolved xberg

    (@xberg)


    4 years, 6 months ago

    Hi,
    In yesterday’s update (1.12.0) there is a modified test.sh file that appears in crontrol. Looking at the file I see that this file has the ability to completely install a new wordpress instance and reset the database.

    Can you please explain what the intention of this file is? I am very worried that this is a security liability.

    thank you

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author John Blackbourn

    (@johnbillion)

    WordPress Core Developer

    4 years, 6 months ago

    This is a file from the automated test suite that got deployed accidentally, I’ll remove it in the next update.

    It’s harmless if you try to run it on its own because it only affects a Docker-based site that uses host.docker.internal as its domain name.

    Regardless, I’ll ensure it’s removed in the next release. Cheers!

    Thread Starter xberg

    (@xberg)

    4 years, 6 months ago

    Thank you John for the quick answer: much appreciated!

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Security concern: recent update creates test.sh’ is closed to new replies.