]> git.ipfire.org Git - thirdparty/bugzilla.git/commit
Bug 711714: (CVE-2011-3667) [SECURITY] The User.offer_account_by_email WebService...
authorFrédéric Buclin <LpSolit@gmail.com>
Wed, 28 Dec 2011 22:15:49 +0000 (23:15 +0100)
committerFrédéric Buclin <LpSolit@gmail.com>
Wed, 28 Dec 2011 22:15:49 +0000 (23:15 +0100)
commitd95d2ff05f816c4023fdaa6db14819f86d3044bf
tree3bea800fbb0c26515eb576778d2f2875e61b8d77
parent6f323ff54643622bcd31f6b7577ab1a23d16f590
Bug 711714: (CVE-2011-3667) [SECURITY] The User.offer_account_by_email WebService method lets you create new user accounts independently of the value of Bugzilla::Auth::Verify::*::user_can_create_account
r=dkl a=LpSolit
Bugzilla/User.pm
Bugzilla/WebService/Constants.pm
Bugzilla/WebService/User.pm
createaccount.cgi
token.cgi