[WT-1617] Executable (.exe/.dll) or image files should not be get uploaded as rate file with tampered extensions. - Workterra Jira

Details

Type: Bug
Status: Closed
Priority: Medium
Resolution: Done
Affects Version/s: None
Fix Version/s: None
Component/s: Platform
Labels:
None

Environment:

QA
Module:
Platform - Security
Reported by:
Harbinger
Item State:
Production Complete
Issue Importance:
Must Have
Sprint:
Bugs-Must Fix- Pilot July2016

Description

1] Login to the application on local environment using following URL:
https://wt-stage.harbinger.in
2] From Home page search and select a company for which testing needs to be carried out using "Search Company" section.
3] Click on "Ben Admin" menu.
4] Click on "Customizer" icon from left navigation menu.
5] Click on "Rates" link which is submenu of "Customizer", user gets navigate to "Rates" details page.
6] Click on "Import" button displaying at top right hand side of the "Rates" page, the "Rate Import" window gets poped up, click on “Add New Rate” tab.
7] Browse the file new rate file.
8] Now browse a image or .exe/.dll file with whose extension is tampered. (i.e. extension changed to .xlsm/.xlsx)
9] Click on "Upload" button.

Actual Result:
Application is allowing to upload such files and when user click on “Import Rate” button the Server error is displaying.
Expected Result:
Not supported extensions files (.txt, .pdf, image files, executable files etc) should not be get uploaded after tampering the extension.

Attachments

Options
- Sort By Name
- Sort By Date
- Ascending
- Descending
- Thumbnails
- List
- Download All

Attachments

AfterFixVerification_QAChecklist_MIME.xlsx
11 kB
13/Jul/16 11:46 AM
QAChecklist_MIME.xlsx
11 kB
13/Jul/16 11:20 AM
RateImportErrorForXlsFile.jpg
151 kB
18/Jul/16 11:55 AM
screenshot-1.png
231 kB
01/Aug/16 02:37 PM
TestRateUsedForTesting.xls
6 kB
18/Jul/16 12:03 PM
UploadPDF.jpg
138 kB
16/Jun/16 09:23 AM

Activity

Ascending order - Click to sort in descending order

Kunal Kedari (Inactive) created issue - 01/Apr/16 07:01 AM

Sujit Chopade (Inactive) made changes - 01/Apr/16 07:10 AM

Field	Original Value	New Value
Assignee	Sujit Chopade [ sujit.chopade ]	Harshawardhan Phalake [ harshawardhan ]

Sujit Chopade (Inactive) made changes - 01/Apr/16 08:36 AM

Component/s		Platform [ 10006 ]
Component/s	Xpress [ 10200 ]
Module	Parent values: Xpress(11100)	Parent values: Platform(10106)Level 1 values: Security(10115)

Sujit Chopade (Inactive) made changes - 01/Apr/16 08:43 AM

Assignee

Harshawardhan Phalake [ harshawardhan ]

Satya [ ID10004 ]

Satya made changes - 01/Apr/16 10:13 AM

Assignee

Satya [ ID10004 ]

Samir [ samir ]

Satya made changes - 27/May/16 12:07 PM

Issue Importance

Must Have [ 11800 ]

Satya made changes - 30/May/16 10:01 AM

Item State

Parent values: LB QA(10201)

Parent values: Development(10200)Level 1 values: Development Backlog(10205)

Samir made changes - 09/Jun/16 06:54 AM

Assignee

Samir [ samir ]

Vijayendra Shinde [ ID10506 ]

Vijayendra Shinde (Inactive) made changes - 14/Jun/16 11:34 AM

Status

Open [ 1 ]

In Development [ 10007 ]

Vijayendra Shinde (Inactive) made changes - 14/Jun/16 11:34 AM

Item State

Parent values: Development(10200)Level 1 values: Development Backlog(10205)

Parent values: Development(10200)Level 1 values: In Progress(10206)

Vijayendra Shinde (Inactive) made changes - 14/Jun/16 12:03 PM

Item State

Parent values: Development(10200)Level 1 values: In Progress(10206)

Parent values: Development(10200)Level 1 values: Ready for Local Testing(10209)

Vijayendra Shinde (Inactive) made changes - 14/Jun/16 12:04 PM

Item State

Parent values: Development(10200)Level 1 values: Ready for Local Testing(10209)

Parent values: LB QA(10201)

Vijayendra Shinde (Inactive) made changes - 14/Jun/16 12:24 PM

Status

In Development [ 10007 ]

Local Testing [ 10200 ]

Rakesh Roy (Inactive) made changes - 14/Jun/16 02:26 PM

Item State

Parent values: LB QA(10201)

Parent values: Development(10200)Level 1 values: Ready for Local Testing(10209)

Rakesh Roy (Inactive) made changes - 14/Jun/16 02:26 PM

Status

Local Testing [ 10200 ]

Reopen in Local [ 10018 ]

Rakesh Roy (Inactive) made changes - 14/Jun/16 02:26 PM

Status

Reopen in Local [ 10018 ]

In Development [ 10007 ]

Vijayendra Shinde (Inactive) made changes - 15/Jun/16 06:37 AM

Item State

Parent values: Development(10200)Level 1 values: Ready for Local Testing(10209)

Parent values: LB QA(10201)Level 1 values: LB Deployed(11600)

Vijayendra Shinde (Inactive) made changes - 15/Jun/16 06:37 AM

Assignee

Vijayendra Shinde [ ID10506 ]

Kunal Kedari [ kunal.kedari ]

Vijayendra Shinde (Inactive) made changes - 15/Jun/16 06:38 AM

Status

In Development [ 10007 ]

Local Testing [ 10200 ]

Kunal Kedari (Inactive) made changes - 16/Jun/16 09:23 AM

Assignee

Kunal Kedari [ kunal.kedari ]

Vijayendra Shinde [ ID10506 ]

Kunal Kedari (Inactive) made changes - 16/Jun/16 09:23 AM

Status

Local Testing [ 10200 ]

Reopen in Local [ 10018 ]

Kunal Kedari (Inactive) made changes - 16/Jun/16 09:23 AM

Attachment

UploadPDF.jpg [ 20002 ]

Vijayendra Shinde (Inactive) made changes - 20/Jun/16 12:02 PM

Status

Reopen in Local [ 10018 ]

In Development [ 10007 ]

Vijayendra Shinde (Inactive) made changes - 20/Jun/16 12:03 PM

Assignee

Vijayendra Shinde [ ID10506 ]

Kunal Kedari [ kunal.kedari ]

Rakesh Roy (Inactive) made changes - 24/Jun/16 07:25 AM

Status

In Development [ 10007 ]

Local Testing [ 10200 ]

Kunal Kedari (Inactive) made changes - 27/Jun/16 08:06 AM

Status

Local Testing [ 10200 ]

Reopen in Local [ 10018 ]

Kunal Kedari (Inactive) made changes - 27/Jun/16 08:06 AM

Assignee

Kunal Kedari [ kunal.kedari ]

Vijayendra Shinde [ ID10506 ]

Vijayendra Shinde (Inactive) made changes - 01/Jul/16 12:00 PM

Status

Reopen in Local [ 10018 ]

In Development [ 10007 ]

Vijayendra Shinde (Inactive) made changes - 01/Jul/16 12:01 PM

Assignee

Vijayendra Shinde [ ID10506 ]

Kunal Kedari [ kunal.kedari ]

Satya made changes - 02/Jul/16 06:55 PM

Sprint

Bugs-Must Fix- Pilot July2016 [ 16 ]

Satya made changes - 02/Jul/16 06:55 PM

Rank

Ranked lower

Kunal Kedari (Inactive) made changes - 05/Jul/16 05:14 AM

Item State

Parent values: LB QA(10201)Level 1 values: LB Deployed(11600)

Parent values: LB QA(10201)Level 1 values: In Testing(10210)

Kunal Kedari (Inactive) made changes - 05/Jul/16 06:56 AM

Status

In Development [ 10007 ]

Local Testing [ 10200 ]

Kunal Kedari (Inactive) made changes - 11/Jul/16 03:31 PM

Attachment

QA_Checklist.xlsx [ 21711 ]

Rakesh Roy (Inactive) made changes - 12/Jul/16 03:20 AM

Assignee

Kunal Kedari [ kunal.kedari ]

Rajendra Joshi [ rajendraj ]

Rajendra Joshi (Inactive) made changes - 13/Jul/16 05:54 AM

Assignee

Rajendra Joshi [ rajendraj ]

Kunal Kedari [ kunal.kedari ]

Kunal Kedari (Inactive) made changes - 13/Jul/16 11:20 AM

Attachment

QA_Checklist.xlsx [ 21711 ]

Kunal Kedari (Inactive) made changes - 13/Jul/16 11:20 AM

Attachment

QAChecklist_MIME.xlsx [ 21907 ]

Kunal Kedari (Inactive) made changes - 13/Jul/16 11:21 AM

Assignee

Kunal Kedari [ kunal.kedari ]

Vijayendra Shinde [ ID10506 ]

Vijayendra Shinde (Inactive) made changes - 13/Jul/16 11:29 AM

Assignee

Vijayendra Shinde [ ID10506 ]

Kunal Kedari [ kunal.kedari ]

Kunal Kedari (Inactive) made changes - 13/Jul/16 11:46 AM

Attachment

AfterFixVerification_QAChecklist_MIME.xlsx [ 21910 ]

Kunal Kedari (Inactive) made changes - 13/Jul/16 11:48 AM

Item State

Parent values: LB QA(10201)Level 1 values: In Testing(10210)

Parent values: LB QA(10201)Level 1 values: Ready for Stage(10213)

Kunal Kedari (Inactive) made changes - 13/Jul/16 11:50 AM

Kunal Kedari [ kunal.kedari ]

Kunal Kedari (Inactive) made changes - 15/Jul/16 06:33 AM

Production Due Date		21/Jul/2016
Stage Due Date		18/Jul/16 [ 2016-07-18 ]

Rakesh Roy (Inactive) made changes - 18/Jul/16 03:54 AM

Developer

Vijayendra Shinde [ ID10506 ]

Gokul Sonawane (Inactive) made changes - 18/Jul/16 07:46 AM

Item State

Parent values: LB QA(10201)Level 1 values: Ready for Stage(10213)

Parent values: Stage QA(10202)Level 1 values: Stage Deployed(11602)

Kunal Kedari (Inactive) made changes - 18/Jul/16 11:42 AM

Item State

Parent values: Stage QA(10202)Level 1 values: Stage Deployed(11602)

Parent values: Stage QA(10202)Level 1 values: In Testing(10214)

Kunal Kedari (Inactive) made changes - 18/Jul/16 11:54 AM

Assignee

Kunal Kedari [ kunal.kedari ]

Vijayendra Shinde [ ID10506 ]

Kunal Kedari (Inactive) made changes - 18/Jul/16 11:55 AM

Attachment

RateImportErrorForXlsFile.jpg [ 22104 ]

Kunal Kedari (Inactive) made changes - 18/Jul/16 12:03 PM

Attachment

TestRateUsedForTesting.xls [ 22105 ]

Rakesh Roy (Inactive) made changes - 01/Aug/16 02:30 PM

Status

Local Testing [ 10200 ]

Reopen in Local [ 10018 ]

Rakesh Roy (Inactive) made changes - 01/Aug/16 02:31 PM

Item State

Parent values: Stage QA(10202)Level 1 values: In Testing(10214)

Parent values: Stage QA(10202)Level 1 values: Re-open(10216)

Rakesh Roy (Inactive) made changes - 01/Aug/16 02:31 PM

Status

Reopen in Local [ 10018 ]

In Development [ 10007 ]

Rakesh Roy (Inactive) made changes - 01/Aug/16 02:31 PM

Status

In Development [ 10007 ]

Local Testing [ 10200 ]

Rakesh Roy (Inactive) made changes - 01/Aug/16 02:31 PM

Status

Local Testing [ 10200 ]

Stage Testing [ 10201 ]

Rakesh Roy (Inactive) made changes - 01/Aug/16 02:31 PM

Resolution		Unresolved [ 10200 ]
Status	Stage Testing [ 10201 ]	Reopen in Stage [ 10023 ]

Vijayendra Shinde (Inactive) made changes - 01/Aug/16 02:38 PM

Attachment

screenshot-1.png [ 23037 ]

Vijayendra Shinde (Inactive) made changes - 01/Aug/16 02:39 PM

Item State

Parent values: Stage QA(10202)Level 1 values: Re-open(10216)

Parent values: Stage QA(10202)Level 1 values: Stage Deployed(11602)

Vijayendra Shinde (Inactive) made changes - 01/Aug/16 02:39 PM

Assignee

Vijayendra Shinde [ ID10506 ]

Kunal Kedari [ kunal.kedari ]

Satya made changes - 02/Aug/16 07:13 AM

Status

Reopen in Stage [ 10023 ]

In Development [ 10007 ]

Satya made changes - 02/Aug/16 07:13 AM

Status

In Development [ 10007 ]

Local Testing [ 10200 ]

Satya made changes - 02/Aug/16 07:13 AM

Status

Local Testing [ 10200 ]

Stage Testing [ 10201 ]

Kunal Kedari (Inactive) made changes - 02/Aug/16 10:17 AM

Item State

Parent values: Stage QA(10202)Level 1 values: Stage Deployed(11602)

Parent values: Stage QA(10202)Level 1 values: In Testing(10214)

Kunal Kedari (Inactive) made changes - 02/Aug/16 10:18 AM

Production Due Date

21/Jul/2016

04/Aug/2016

Kunal Kedari (Inactive) made changes - 02/Aug/16 10:18 AM

Item State

Parent values: Stage QA(10202)Level 1 values: In Testing(10214)

Parent values: Stage QA(10202)Level 1 values: Ready for Production(10217)

Rakesh Roy (Inactive) made changes - 16/Aug/16 06:40 AM

Item State

Parent values: Stage QA(10202)Level 1 values: Ready for Production(10217)

Parent values: Stage QA(10202)Level 1 values: Production Deployment on Hold(10224)

Satya made changes - 03/Sep/16 07:46 AM

Item State

Parent values: Stage QA(10202)Level 1 values: Production Deployment on Hold(10224)

Parent values: Production QA(10203)Level 1 values: Production Deployed(10221)

Kunal Kedari (Inactive) made changes - 08/Sep/16 04:35 AM

Item State

Parent values: Production QA(10203)Level 1 values: Production Deployed(10221)

Parent values: Production QA(10203)Level 1 values: In Testing(10218)

Kunal Kedari (Inactive) made changes - 08/Sep/16 04:38 AM

Status

Stage Testing [ 10201 ]

Production Testing [ 10202 ]

Kunal Kedari (Inactive) made changes - 08/Sep/16 04:38 AM

Resolution	Unresolved [ 10200 ]	Fixed [ 1 ]
Status	Production Testing [ 10202 ]	Production Complete [ 10028 ]

Kunal Kedari (Inactive) made changes - 08/Sep/16 04:38 AM

Status

Production Complete [ 10028 ]

Closed [ 6 ]

Prasad Pise (Inactive) made changes - 13/Jan/17 05:32 AM

Item State

Parent values: Production QA(10203)Level 1 values: In Testing(10218)

Parent values: Production Complete(10222)

Satya made changes - 04/Nov/17 06:19 AM

Environment_New

LB [ 18444 ]

People

Assignee:: Kunal Kedari (Inactive)

Reporter:: Kunal Kedari (Inactive)

Developer:: Vijayendra Shinde (Inactive)

QA:: Kunal Kedari (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Dates

Created:: 01/Apr/16 07:01 AM

Updated:: 04/Nov/17 06:19 AM

Resolved:: 08/Sep/16 04:38 AM

Pre-Prod Due Date:: 18/Jul/2016

Production Due Date:: 04/Aug/2016