change error message when changing username

Bug #1772774 reported by Cecilia Vela Gurovic on 2018-05-23
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mahara
High
Cecilia Vela Gurovic
17.04
High
Unassigned
17.10
High
Unassigned
18.04
High
Unassigned
18.10
High
Cecilia Vela Gurovic

Bug Description

When trying to change your username, if it is already taken the error message is displayed:

Sorry, this username is already taken.

We should not be giving information about which usernames are taken.
We should change it to something a more general message.

CVE References

Changed in mahara:
status: New → Confirmed
importance: Undecided → High
information type: Private Security → Public
information type: Public → Public Security

CVE-2018-11565

To post a comment you must log in.
This report contains Public Security information  Edit
Everyone can see this security related information.

Other bug subscribers