In Textpattern 4.5.7, an unprivileged author can change an article's markup setting.
References
Link | Resource |
---|---|
https://github.com/textpattern/textpattern/commit/950d9e0e4ee46efa41e791eac6cd55d2f558c3c9 | Patch Third Party Advisory |
https://github.com/textpattern/textpattern/blob/f94c3fb9916ee0c7fa4a52025fa4e8c3273e355b/HISTORY.txt | Release Notes Third Party Advisory |
Configurations
Information
Published : 2020-08-14 12:15
Updated : 2020-08-20 11:41
NVD link : CVE-2015-8032
Mitre link : CVE-2015-8032
JSON object : View
CWE
CWE-269
Improper Privilege Management
Products Affected
textpattern
- textpattern