Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-10320

"Most active topic" can leak topic title of topics in password-protected forums

    Details

      Description

      Let us suppose a user A, having the required permissions to access to a forum protected by a password without having it and a user B, who has the requred permissions and the password. We observe the following bug : if the user B has in its personal data posted the greater number of messages in a topic of this forum, the user A, without having the access to this forum as he does not know the password could see the name of this topic on the user B's profile."

        Activity

        There are no comments yet on this issue.

          People

          • Assignee:
            bantu Andreas Fischer
            Reporter:
            manoco manoco
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development