Description

With this PR we sanitise the paths that the manager sends to the agent, so we avoid problems due to possible references to parent folders.

Now, in the case of finding a reference to the parent folder, a Warning message appears and discards it, continuing with the rest of the files that the manager tries to send.

Tests

In the following case we can see a real case, where we can see how it is avoided, appearing also the warning.

2024/11/21 12:31:32 wazuh-agent: WARNING: Invalid file ' \\..\local_internal_options.conf
', vulnerable to directory traversal attack. Ignoring.
2024/11/21 12:31:32 wazuh-agent: WARNING: Unknown message received. No action defined.
2024/11/21 12:31:32 wazuh-agent: WARNING: Invalid file ' \\..\dummy_file.txt
', vulnerable to directory traversal attack. Ignoring.