VWE-2018-4394
Return to current revision
Current Revision
April 8, 2018, 11:19 PM
Differences in Content
-
[template]Vulnerability
| cve=
| aka=
| severity=Medium
| difficulty=Normal -
-
| description=Permissions Escalation. Users may be able to create certain wiki page-types without permission, as long as the user has permission to create normal pages. Does not affect the Lite version. -
+
| description=Permissions Escalation. Users may be able to create certain wiki page-types without permission, as long as the user has permission to create normal pages.
| lite=no -
| discover-date=February 13, 2018
| patch-date=March 16, 2018
| patches=4.0.21 Patch Level 1
4.0.20 Patch Level 4
4.0.19 Patch Level 7
4.0.18 Patch Level 8
4.0.17 Patch Level 10
| workaround=In the Wiki Admin Panel, go to Structures > Area Manager, and edit each area so that Can Contain Content-Types only has "Normal Pages" selected.
[/template]