VWE-2015-0843
Return to current revision
General Differences
made the following changes
- removed the title prefix 'XSS'
- changed the title from 'Unsupervised Behavior Vulnerability' to 'VWE-2015-0843'
Differences in Content
-
[template]Vulnerability
| cve=
| aka=Unsupervised Behavior Vulnerability
| severity=Low
| difficulty=Easy
| description=Permissions escalation. Does not affect Lite versions.
| discover-date=March 2015
| patch-date=March 3, 2015
| patches=4.0.1 Patch Level 1
4.0.0 Patch Level 1
4.0.0 RC 5 Patch Level 1
4.0.0 RC 4 Patch Level 2
4.0.0 RC 3 Patch Level 3
4.0.0 RC 2 Patch Level 3
4.0.0 RC 1 Patch Level 3
| workaround=Update permissions so that users whose edits are moderated cannot edit wiki content.
[/template]