Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

CSRF vulnerability needs fixing

#176

When an admin is logged in, the URL to create a user can be passed (say, from the source of an image tag) and silently create a user. We just need to prevent off-site creation of users.

Reported by expNinja · May 4th, 2011 @ 07:32 PM

State: resolved
Milestone: Beta 3
Assigned to: expNinja expNinja

Activity

  1. expNinja
    expNinja
    • Tag set to csrf, users

    May 4th, 2011 @ 07:32 PM

  2. expNinja
    expNinja
    • State changed from new to open
    • Milestone set to Beta 3
    • Milestone order changed from 59 to 0

    May 4th, 2011 @ 07:33 PM

  3. expNinja
    expNinja
    • State changed from open to resolved

    May 13th, 2011 @ 09:28 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.