This is an old revision of this page, as edited February 15, 2018, 3:14 PM by pegasus(contribs). It may differ significantly from the current revision.
The versions listed below are known to be affected by this issue. If you are using one of those versions, you should update to a newer release that has no known vulnerabilities.
Common Name None VWE-ID VWE-2017-4317 Related Report #5316 Severity LOW Exploit Difficulty EASY Platform Affects all platforms supported by the vulnerable versions. Description Permissions Escalation. Possible for users to see some thread titles in WIDGET output even though they may otherwise be not allowed to view those threads. Does not affect VaultWiki Lite. Affects XenForo only.
Discovered December 11, 2017 Resolved January 10, 2018 Patches Available 4.0.20 Patch Level 2
4.0.19 Patch Level 5
4.0.18 Patch Level 6
4.0.17 Patch Level 8
4.0.16 Patch Level 9