Project

General

Profile

Actions
Copy link

action #589

closed

Fix security hole with uploaded files

Added by ancorgs almost 11 years ago. Updated almost 11 years ago.

Status:
Closed
Priority:
Immediate
Assignee:
ancorgs
Category:
Development
Target version:
Reimbursement polishment
Start date:
2013-07-11
Due date:
% Done:

100%

Estimated time:

Description

With the current implementation, uploaded files (which includes invoices and signed reimbursements) are not protected by access control. An attacker only needs to guess the url (which is not easy, anyway) to read sensible information.

Actions
Copy link
 #1

Updated by ancorgs almost 11 years ago

  • % Done changed from 0 to 100
  • Status changed from New to Closed

Fixed.

Actions
Copy link

Also available in: Atom PDF