Security Announcements

MSA-11-0023: Guests can add comments to front page activities

 
 
My ugly mug
MSA-11-0023: Guests can add comments to front page activities
 
Topic: Guests can add comments to front page activities
Severity: Serious
Versions affected: < 2.0.4, < 2.1.1 (1.9.x not affected)
Reported by: Helen Foster
Issue no.: MDL-28503
Solution: upgrade to 2.0.4 or 2.1.1
Workaround: Don't enable comments for front page activities or use a comments block

Description:

With this ability it was possible for users who were not logged in to post comments.