** CVE added: https://cve.mitre.org/cgi- bin/cvename.cgi?name=2017-1000142
-- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1425306 Title: Users can delete submitted page through URL Status in Mahara: Fix Released Status in Mahara 1.10 series: Fix Released Status in Mahara 1.8 series: Fix Released Status in Mahara 1.9 series: Fix Released Bug description: To reproduce: - Create a page - Submit it to a group - Check that there is no 'Delete' button on 'Pages' web-page for this page - Find out page ID (through page view URL) - Go to YOURSITE/view/delete.php?id=XXX where XXX is page ID - See that you can easily delete a page To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1425306/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~mahara-contributors Post to : [email protected] Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
