[OFBIZ-12301] SecuredUpload::isValidTextFile wrong check with uppercase

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Release Branch 17.12, Trunk, 18.12.01
• Fix Version/s: Release Branch 17.12, 18.12.01
• Component/s: framework/security
• Sprint: Bug Crush Event - 21/2/2015
• Assignee: Jacques Le Roux
• Reporter: Jacques Le Roux
• Created: 10/Aug/21 11:01
• Updated: 11/Aug/21 16:10
• Resolved: 10/Aug/21 11:06

Description

Today Zhujie from Ping'an Technology reported a bug in SecuredUpload::isValidTextFile where a wrong check is done

Note: this is a post-auth vuln., So we did not create a CVE