Fix incomplete disallowed remote addresses list SSRF

mybb · Apr 30, 2024 · d6a9601 · d6a9601
1 parent 450259e
commit d6a9601
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/install/index.php b/install/index.php
@@ -1650,7 +1650,8 @@ function create_tables()
  */
 
 \$config['disallowed_remote_addresses'] = array(
-	'127.0.0.1',
+	'0.0.0.0',
+	'127.0.0.0/8',
 	'10.0.0.0/8',
 	'172.16.0.0/12',
 	'192.168.0.0/16',