Files
UNIT3D-Community-Edition/app/Http/Controllers
HDVinnie 2343b6b4b0 security: improper access control for forum tools
- A user in the moderator group is able to access forum tools meant only for admin and owner group users. Thus a moderator is able to create, update and destroy forums.
- The forum tools were hidden in staff dash to mods but did not stop them from accessing the route directly.
2021-10-23 19:32:06 -04:00
..
2021-10-21 15:36:45 -04:00
2021-09-28 12:49:46 -04:00
2021-09-21 16:44:13 -04:00
2021-09-06 23:26:02 +00:00
2021-09-06 23:26:02 +00:00
2020-07-19 17:33:50 -04:00
2021-05-16 02:41:53 +00:00
2021-09-06 23:26:02 +00:00
2021-09-06 23:26:02 +00:00
2021-09-06 23:26:02 +00:00
2021-10-21 08:30:40 +02:00
2021-09-06 23:26:02 +00:00
2020-07-22 16:57:13 -04:00
2021-10-03 10:00:37 -04:00
2021-09-06 23:26:02 +00:00
2021-09-06 23:26:02 +00:00