Skip to content
This repository was archived by the owner on Sep 24, 2018. It is now read-only.

Version 0.8.2: Security release (Information disclosure)

Choose a tag to compare

View all tags
@danielbachhuber danielbachhuber released this 09 Apr 20:32
0.8.2
bf22336

  • Fix information disclosure security vulnerability, part two.

    Authenticated users could access revisions of published and unpublished posts. Revisions are genuinely only accessible to authenticated users with permission to edit the revision's post. We tested, we promise.

    Reported by @joehoyle on 2015-04-09.

Assets 2
Loading