Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-12172

"Download all attachments" feature leaks post/pm attachments when being able to download one of them

    Details

      Description

      Download all link for Post#9 and PM#9 are both the same:
      phpBB/download/file.php?archive=.zip&post_msg_id=9

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                nickvergessen Joas Schilling
                Reporter:
                nickvergessen Joas Schilling
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: