admin: fix index validation for PUT requests (#6824)

caddyserver · Feb 4, 2025 · 96c5c55 · 96c5c55
1 parent 9283770
commit 96c5c55
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/admin.go b/admin.go
@@ -1139,7 +1139,7 @@ traverseLoop:
 						return fmt.Errorf("[%s] invalid array index '%s': %v",
 							path, idxStr, err)
 					}
-					if idx < 0 || idx >= len(arr) {
+					if idx < 0 || (method != http.MethodPut && idx >= len(arr)) || idx > len(arr) {
 						return fmt.Errorf("[%s] array index out of bounds: %s", path, idxStr)
 					}
 				}