MSA-11-0017: Ability to generate invalid records in the comments table in the database
| Topic: | Ability to generate invalid records in the comments table in the database |
| Severity: | Major |
| Versions affected: | < 2.0.3 (1.9.x not affected) |
| Reported by: | Sam Hemelryk |
| Issue no.: | MDL-26854 |
| Solution: | Upgrade to 2.0.3 |
| Workaround: | None - please upgrade as soon as possible |
Description:
This is a significant bug in the comments system which allows an authenticated user to fill the comments table in the database with completely invalid records.