[Koha-bugs] [Bug 14272] Allow OPAC to show a single news item
bugzilla-daemon at bugs.koha-community.org
bugzilla-daemon at bugs.koha-community.org
Fri Dec 18 22:30:53 CET 2015
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14272
Martin Persson <xarragon at gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|Needs Signoff |Failed QA
--- Comment #9 from Martin Persson <xarragon at gmail.com> ---
I just realized that the ability show arbitrary news items by ID poses a
vulnerability; you can view stuff with visbility other than the OPAC.
This would leak internal news to whomever has access to the OPAC.
--
You are receiving this mail because:
You are watching all bug changes.
More information about the Koha-bugs
mailing list