Blogs get deleted without sesskey check
Bug #676336 reported by
Richard Mansfield
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Mahara |
Fix Released
|
High
|
Richard Mansfield | ||
1.3 |
Fix Released
|
High
|
Richard Mansfield | ||
mahara (Ubuntu) |
Fix Released
|
Medium
|
Artur Rona | ||
Lucid |
Fix Released
|
Undecided
|
Unassigned | ||
Maverick |
Fix Released
|
Undecided
|
Unassigned | ||
Natty |
Fix Released
|
Medium
|
Artur Rona |
Bug Description
Permissions are checked but the sesskey is neither passed nor checked
e.g. artefact/
Changed in mahara: | |
milestone: | none → 1.2.7 |
Changed in mahara: | |
importance: | Undecided → High |
Changed in mahara: | |
status: | New → Fix Committed |
Changed in mahara: | |
assignee: | nobody → Richard Mansfield (richard-mansfield) |
Changed in mahara (Ubuntu): | |
assignee: | nobody → François Marier (fmarier) |
status: | New → In Progress |
Changed in mahara: | |
status: | Fix Committed → Fix Released |
visibility: | private → public |
Changed in mahara (Ubuntu): | |
assignee: | François Marier (fmarier) → Artur Rona (ari-tczew) |
importance: | Undecided → Medium |
Changed in mahara (Ubuntu Lucid): | |
status: | New → Confirmed |
Changed in mahara (Ubuntu Maverick): | |
status: | New → Confirmed |
To post a comment you must log in.
Please note that both debdiffs are currently embargoed and should not be released while this bug is private.
We'll change the bug status once the upstream release has happened and therefore made these problems public.