Moderators can edit themes via the API
Package
Discourse
(Ruby)
Affected versions
stable <= 2.8.8; beta <= 2.9.0.beta9; tests-passed <= 2.9.0.beta9
Patched versions
stable >= 2.8.9; beta >= 2.9.0.beta10; tests-passed >= 2.9.0.beta10
Impact
A moderator can create new and edit existing themes by using the API.
Patches
This issue is patched in the latest
stable
,beta
andtests-passed
versions of Discourse