-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Medium
-
Affects Version/s: 2.0.3, 2.1.5, 2.2.10, 2.3.3, 2.4.5, 2.5.8, 2.6.2, 2.7.2
-
Component/s: None
browseusers.vm does not escape usernames.
- is cloned from
-
CONFSERVER-10807 Users with view permissions on a space are able to delete (purge) pages they don't have permission to edit/access
-
- Closed
-