Information disclosure bug

Created on 4 October 2012, over 11 years ago
Updated 29 March 2023, over 1 year ago

Anonimous users can access usernames on a site using the following url, where the number is the uid of a user.

For example:
http://supportdemo6.tag1consulting.com/support/1/assigned
http://supportdemo.tag1consulting.com/support/1/assigned

πŸ› Bug report
Status

Closed: outdated

Version

1.0

Component

User interface

Created by

πŸ‡©πŸ‡ͺGermany sapox

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.69.0 2024