Closed
Description
Work Environment
Question | Answer |
---|---|
OS version (server) | Ubuntu docker base image |
OS version (client) | All ... |
TheHive version / git hash | 4.0.5 |
Package Type | DEB |
Browser type & version | All |
Problem Description
File observables with special characters in filenames can not be downloaded. "Invalid filename" error is shown. File can be found in server filesystem.
Steps to Reproduce
- Create a file observable with example name: "Re: Re: malicious mail.eml"
- Try to download zipped file from TheHive UI
- Observe the error
Possible Solutions
- Filenaming logic (mapping filename to file) may be investigated
- Validations could be added on frontend and backend
- Special chars and whitespace could be stripped