Access index.php returns file contents instead of being executed

[RimuruChan]

Description of the problem

Using docker from https://hub.docker.com/r/domjudge/domserver
When access http://host/index.php it returns php file content instead of index page.

Your environment

• DOMjudge 8.3.1
• Ubuntu 22.04
• Webserver nginx

Steps to reproduce

curl http://127.0.0.1/index.php

Expected behaviour

Return index page

Actual behaviour

Return the content of index.php

[vmcj]

Can you try as: curl http://127.0.0.1?

[RimuruChan]

@vmcj Yes, it works. I know this works. I just accidentally discovered that there will be problems when accessing index.php directly. I have now temporarily added an nginx rule to fix this vulnerability.

location ~ ^/index.php(/|$) {
        return 301 /;
}