/series/add: anonymous user can bypass security checks by using special URL #445

Closed

Closed

/series/add: anonymous user can bypass security checks by using special URL#445

Assignees

Labels

area/securitykind/bug

Milestone

It turns out that we don't have protection in the Spring Security for URLs like /series/add/country/foo and /series/add/category/foo.

Metadata

Assignees

php-coder

Labels

area/securitykind/bug

Projects

No projects

Milestone

0.4

Relationships

None yet

Development

No branches or pull requests