VWE-2010-0000-1 Printable Version

https://www.vaultwiki.org/pages/Book/Documentation/VWE-2010-0000-1
This page is a chapter in Info Known Vulnerabilities

This page has been seen 6,424 times.

    • Created by
      on
Common NameNone
VWE-IDVWE-2010-0000-1
Related Report#1994
SeverityLOW
Exploit DifficultyEASY
PlatformAffects all platforms supported by the vulnerable versions.
DescriptionPermissions escalation. A user can create wiki content with terms in the title that would normally be censored, but display uncensored in the content's URL. Does not affect Lite versions.
DiscoveredSeptember 19, 2010
ResolvedMarch 7, 2013
Patches Available4.0.0 Alpha 1
The versions listed below are known to be affected by this issue. If you are using one of those versions, you should update to a newer release that has no known vulnerabilities.

Notes

This issue was treated as a standard bug at the time it was discovered, even though it effectively allows users to circumvent the forum's censor. Due to the perceived difficulty of resolving the issue, it was deferred until a major feature update. Thus, the issue remained unpatched for all versions prior to that update.