Details
-
Bug
-
Resolution: Fixed
-
High
Description
Hello all,
Everyone could access to the page of members of our project without any account or rights on it. We try to do it on our side and I confirm we can do the same on several others projects, unknown of us......
If Sam Gabal is reading it, I can access his page ; the same for Benjamin Ghenne, Jérémy Huet, Lucie Harive, .... and many others -> A kind of security flaw, don't U think so ?
...don't know who declare as assignee....