AS1024/Kanboard-Prod
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add CVE ID to ChangeLog

Browse Source
This commit is contained in:
Frederic Guillot
2017-08-16 20:46:47 -07:00
parent daccedbdab
commit 066c9bf6e1
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog
View File

@@ -4,7 +4,8 @@ Version 1.0.46 (August 13, 2017)
Security Issues: Security Issues:
* Fix two privilege escalation issues: a standard user could reset the password * Fix two privilege escalation issues: a standard user could reset the password
of another user by altering form data. of another user (including admin) by altering form data.
(CVE-2017-12850 and CVE-2017-12851, discovered by "chbi").
Improvements: Improvements: