MSA-11-0020: Continue links in error messages can lead offsite

MSA-11-0020: Continue links in error messages can lead offsite

by Michael de Raadt -
Number of replies: 0
Topic: Continuation link can sometimes link offsite
Severity: Minor
Versions affected: < 1.9.13, < 2.0.4, < 2.1.1
Reported by: Matt Meisberger
Issue no.: MDL-27464
Solution: upgrade to latest version
Workaround: apply patch

Description:

It was possible for error message links to lead offsite