admin: fix index validation for PUT requests (#6824)

2025-05-24 02:02:26 -04:00 · 2025-02-04 19:27:32 +03:30 · 2025-02-04 19:27:32 +03:30 · 96c5c554c1
commit 96c5c554c1
parent 9283770f68
1 changed files with 1 additions and 1 deletions
--- a/admin.go
+++ b/admin.go
@ -1139,7 +1139,7 @@ traverseLoop:
 						return fmt.Errorf("[%s] invalid array index '%s': %v",
 							path, idxStr, err)
 					}
-					if idx < 0 || idx >= len(arr) {
+					if idx < 0 || (method != http.MethodPut && idx >= len(arr)) || idx > len(arr) {
 						return fmt.Errorf("[%s] array index out of bounds: %s", path, idxStr)
 					}
 				}