lib/plugins/usermanager/admin.php · f23f95941a400702f525923973f3612df6da82cb · BRIC / dokuwiki

10 years ago

SECURITY escape user properties in user manager #1081 · f23f9594

Andreas Gohr authored 10 years ago

The user properties (login, real name, etc) where not properly escaped
in the user manager's edit form. This allowed a XSS attack on the
superuser by registered users.

Thanks to Filippo Cavallarin from www.segment.technology for discovering
this bug.

f23f9594

History

SECURITY escape user properties in user manager #1081

Andreas Gohr authored 10 years ago

The user properties (login, real name, etc) where not properly escaped
in the user manager's edit form. This allowed a XSS attack on the
superuser by registered users.

Thanks to Filippo Cavallarin from www.segment.technology for discovering
this bug.

Code owners

Assign users and groups as approvers for specific file changes. Learn more.