?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
(parent: 6cc0d5e) | patch
SECURITY: HTMLUserTextField: Treat hidden users as unregistered if current user can...
commit5a4aabb2ce6768ba4fec7eb842e03f5f17635e0a
authorBartosz Dziewoński <matma.rex@gmail.com>
Thu, 14 Jul 2022 01:13:04 +0000 (14 03:13 +0200)
committerReedy <reedy@wikimedia.org>
Thu, 29 Sep 2022 20:04:29 +0000 (29 20:04 +0000)
treed7c434364b4d1ebc637f692c4b00b08cbac10ed1tree | snapshot (tar.gz zip)
parent6cc0d5ec0ee9cfdb8168749cc564bfc75f5dafaccommit | diff
SECURITY: HTMLUserTextField: Treat hidden users as unregistered if current user can't view them

CVE-2022-41765

Bug: T309894
Change-Id: I0707153ccbdb062a6b7ce461cc535aa2af8e4576
includes/htmlform/fields/HTMLUserTextField.php diff | blob | blame | history
MediaWiki Core