VWE-2018-4618
Return to current revision
Current Revision
July 18, 2018, 3:08 PM
Differences in Content
-
[template]Vulnerability
| cve=
| aka=
| severity=Low
| difficulty=Easy
| description=Permissions Escalation. A user can view templated content even though that user has no permission to view the template.
| lite=no
| discover-date=July 6, 2018
| patch-date=July 18, 2018
| patches=4.0.23 Patch Level 1
4.0.22 Patch Level 3
4.0.21 Patch Level 4
4.0.20 Patch Level 7
4.0.19 Patch Level 10 -
+| workaround=In the Wiki admin panel, go to Structures > Content Types, and disable the "Template" content-type.
-
[/template]