[Koha-bugs] [Bug 14272] Allow OPAC to show a single news item

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14272

--- Comment #2 from Martin Persson <xarragon at gmail.com> ---
There is a security issue in this version; the ID supplied from the URL
parameter is not checked for expiry. This means people can watch old, expired
news by changing the ID. This is known as 'object reference bug'. Whether it is
a problem or not is another matter.

-- 
You are receiving this mail because:
You are watching all bug changes.