The versions listed below are known to be affected by this issue. If you are using one of those versions, you should update to a newer release that has no known vulnerabilities.
Common Name Glass Sandbox Vulnerability VWE-ID VWE-2013-0010 Related Report #3001 Severity HIGH Exploit Difficulty NORMAL Platform Affects all platforms supported by the vulnerable versions. Description Permissions escalation. When using Custom Permissions for a wiki area, if any permissions are set to "No", it will still be treated as "Not Set." Additionally, if a user has editing permissions in one area, and the area with "No" editing permissions is a sub-area and permits HTML, then the user is able to edit HTML content in that sub-area. Does not affect Lite versions.
Discovered April 4, 2013 Resolved April 4, 2013 Patches Available 4.0.0 Alpha 4 Workaround Update all wiki areas so that none allow HTML.
This site uses cookies to help personalize content, to tailor your experience, and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.
By continuing to use this site, you are consenting to our use of cookies.