Uploaded image for project: 'PUBLIC - Liferay Portal Enterprise Edition'
  1. PUBLIC - Liferay Portal Enterprise Edition
  2. LPE-6761

Unauthorized users may perform administrative actions

    Details

    • Fix Pack Status:
      Waiting for Decision

      Description

      Due to missing permission checks, an unauthorized user can add users to groups and organizations.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                douglas.wong Douglas Wong
                Reporter:
                hugo.huijser Hugo Huijser
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Packages

                  Version Package
                  5.1 EE SP6 (5.1.9)
                  5.2 EE SP6 (5.2.10)
                  6.1 EE GA2 (6.1.20)