VWE-2017-4318
Return to current revision
Current Revision
April 8, 2018, 11:23 PM
Differences in Content
-
[template]Vulnerability
| cve=
| aka=
| severity=Low
| difficulty=Easy -
-
| description=Permissions Escalation. Possible for users to see cached WIDGET content that they normally don't have permission to view. Does not affect VaultWiki Lite. -
+
| description=Permissions Escalation. Possible for users to see cached WIDGET content that they normally don't have permission to view.
| lite=no -
| discover-date=December 11, 2017
| patch-date=January 10, 2018
| patches=4.0.20 Patch Level 2
4.0.19 Patch Level 5
4.0.18 Patch Level 6
4.0.17 Patch Level 8
4.0.16 Patch Level 9
| workaround=In your platform's Custom BB-Code Manager, locate the wiki's WIDGET BB-Code tag, and modify Wiki-Related Options so that the tag is not parsed.[/template]