Bug #68232
closedDisallow unauthorized module access
100%
Description
Changing the module dispatcher url from mod.php to index.php introduced a potential security leak,
as some modules could be called even with no user authenticated.
Fix and harden the checks in the module dispatcher to avoid that.
Updated by Gerrit Code Review about 9 years ago
- Status changed from New to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/41477
Updated by Helmut Hummel about 9 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset a2074903a2428efd396fd3b7b2cb227c919fa93e.
Updated by Gerrit Code Review about 9 years ago
- Status changed from Resolved to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/41489
Updated by Gerrit Code Review about 9 years ago
Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/41489
Updated by Nicole Cordes about 9 years ago
- Status changed from Under Review to Resolved
Applied in changeset 8b434c0aa79c36401f7214dc6881f9277670fcf6.