[XPORTER-2956] Unauthenticated user can access, create, update, delete template - Xblend Issue Tracker

Xporter

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: Release 6.2.4
Fix Version/s: Release 6.3.0
Component/s: Security, Template Management
Labels:
- security_vulnerability_high

Sprint:
R6.3.0 Sprint 3
Requirement Status:
OK
- 1

Description

Normally only administrator of access the exporter template setting, but other user can idor attack leads to: create new template, update, delete and set default template for any projects.

Attachments

Issue Links

mentioned in: Page Loading...

Sub-Tasks

There are no Sub-Tasks for this issue.

Activity

People

Assignee:: Rui Rodrigues

Reporter:: Rui Rodrigues

Votes:: 0 Vote for this issue

Watchers:: 0 Start watching this issue

Dates

Created:: 04/Dec/19 2:05 PM

Updated:: 28/Apr/20 3:43 PM

Resolved:: 28/Apr/20 3:43 PM

Time Tracking

Estimated:

Remaining:

Logged:

3d 5h 30m

Include sub-tasks