| Summary: | Specially crafted URL can allow unauthorized download of MARC files from staff client | ||
|---|---|---|---|
| Product: | Koha | Reporter: | Liz Rea <wizzyrea> |
| Component: | Staff interface | Assignee: | Paul Poulain <paul.poulain> |
| Status: | CLOSED FIXED | QA Contact: | Bugs List <koha-bugs> |
| Severity: | major | ||
| Priority: | PATCH-Sent (DO NOT USE) | CC: | chris, gmcharlt, wizzyrea |
| Version: | 3.6 | ||
| Hardware: | All | ||
| OS: | All | ||
| Change sponsored?: | --- | Patch complexity: | --- |
| Documentation contact: | Documentation submission: | ||
| Text to go in the release notes: | Version(s) released in: | ||
| Circulation function: | |||
| Attachments: |
Bug 6641 -- Specially crafted URL can allow unauthorized download of MARC files from staff client
Bug 6641 -- Specially crafted URL can allow unauthorized download of MARC files from staff client |
||
|
Description
Liz Rea
2011-07-28 15:51:11 UTC
Created attachment 4770 [details] [review] Bug 6641 -- Specially crafted URL can allow unauthorized download of MARC files from staff client Making sure permissions are checked on download of MARC files from staff client Created attachment 4786 [details] [review] Bug 6641 -- Specially crafted URL can allow unauthorized download of MARC files from staff client Making sure permissions are checked on download of MARC files from staff client Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz> Security issue, patch pushed please test Tested, works! |