My friend @lvps discovered an information disclosure in the new Domain Plan Page.
The page should not be public in order to do not disclose the Domain Plan and its price.
This task will be private until fixed.
Description
Description
Revisions and Commits
Revisions and Commits
| R3 KISS Libre Hosting Panel | |||
| R3:81a2cd3ad3f0 fix Domain Plan visibility scope | |||
Event Timeline
valerio.bozzolan triaged this task as Unbreak Now! priority.May 10 2020, 12:492020-05-10 12:49:35 (UTC+2)
valerio.bozzolan created this task.
valerio.bozzolan created this object with visibility "Subscribers".
valerio.bozzolan closed this task as Resolved by committing R3:81a2cd3ad3f0: fix Domain Plan visibility scope.May 10 2020, 15:392020-05-10 15:39:35 (UTC+2)
valerio.bozzolan changed the visibility from "Subscribers" to "Public (No Login Required)".May 10 2020, 15:402020-05-10 15:40:01 (UTC+2)
valerio.bozzolan moved this task from Priority to Done on the KISS Libre Hosting Panel board.May 10 2020, 15:422020-05-10 15:42:26 (UTC+2)
valerio.bozzolan added a project: User-valerio.bozzolan.Oct 6 2020, 16:382020-10-06 16:38:33 (UTC+2) ·
valerio.bozzolan set the point value for this task to 2.Oct 6 2020, 16:452020-10-06 16:45:47 (UTC+2)
valerio.bozzolan moved this task from Backlog to /dev/null on the User-valerio.bozzolan board.Nov 19 2020, 23:102020-11-19 23:10:26 (UTC+1)