- changed status to resolved
Potential leak of confidential information
Issue #36
resolved
All versions from 1.8.0 to 2.7.1 are subject to a potential leak of confidential information. Users not authorized for a specific question topic including anonymous users might gain access to the statistics of a question topic (which might include the top askers/respondents user names) and the labels used in a question topic.
The questions and their answers are not affected.
Comments (3)
-
reporter -
reporter - edited description
-
reporter - edited description
- Log in to comment
fixed in version 2.7.2