[Koha-bugs] [Bug 14272] Allow OPAC to show a single news item

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Fri Dec 18 22:30:53 CET 2015


http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14272

Martin Persson <xarragon at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|Needs Signoff               |Failed QA

--- Comment #9 from Martin Persson <xarragon at gmail.com> ---
I just realized that the ability show arbitrary news items by ID poses a
vulnerability; you can view stuff with visbility other than the OPAC.
This would leak internal news to whomever has access to the OPAC.

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list