Affects all platforms supported by the vulnerable versions.
Description
Permissions escalation in wiki attachments. With collusion of downloading users, uploading users can circumvent some attachment-related permissions. Does not affect Lite versions.
The versions listed below are known to be affected by this issue. If you are using one of those versions, you should update to a newer release that has no known vulnerabilities.
Notes
Attachments that were already violation of the rules prior to applying the patch must be identified and moderated manually.
This site uses cookies to help personalize content, to tailor your experience, and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.
