-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Low
-
Affects Version/s: 10.2.11, 9.2.20
-
Component/s: Security
-
Severity 3 - Minor
Issue Summary
Find Drafts in IDOR returns with zero offset even if non-zero offset is provided
Steps to Reproduce
- Start confluence, on admin/darkfeatures.action page, remove Site Dark Features - site-wide.shared-drafts
- Create only 1 or 2 drafts
- Hit rest/tinymce/1/drafts with query params limit = 10 and offset = 5.
Expected Results
It should return empty result as offset is 5 and we have only 2 results.
Actual Results
It returns both the drafts i.e. with 0 offset
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available
- mentioned in
-
Page Loading...