Information disclosure bug

Created on 4 October 2012, over 12 years ago
Updated 29 March 2023, almost 2 years ago

Anonimous users can access usernames on a site using the following url, where the number is the uid of a user.

For example:
http://supportdemo6.tag1consulting.com/support/1/assigned
http://supportdemo.tag1consulting.com/support/1/assigned

🐛 Bug report
Status

Closed: outdated

Version

1.0

Component

User interface

Created by

🇩🇪Germany sapox

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024