-
Bug
-
Resolution: Duplicate
-
Medium
-
None
-
3.3
-
None
-
ubuntu
When I do wget --user=<user> --password=<pwd> -m <confluence url>
I delete all attachments!!!!!!!!!!!!!!!!!!
The systems seems to use the wrong logic when javascript is disabled (in which case it assumes yes for deletion)
- duplicates
-
CONFSERVER-8254 Review GET methods in Confluence to ensure web spiders cannot execute dangerous actions (like removeattachment)
-
- Gathering Impact
-