-
Type:
Bug
-
Status: Closed
-
Resolution: Fixed
-
Affects Version/s: 6.2.X EE, 7.0.0 M3
-
Fix Version/s: 6.1.X EE, 6.2.4 CE GA5, 6.2.X EE, 7.0.0 M5
-
Component/s: Documents & Media, Security Vulnerability
-
Labels:
-
Branch Version/s:6.2.x, 6.1.x
-
Backported to Branch:Committed
-
Story Points:12
-
Fix Priority:3
-
Git Pull Request:
Reproduction steps:
1) Create a document folder with Viewable by only site members
2) Put a document into it and define a Tag for this document
3) Put a Document and Media Display and a Tag clouds portlet to a page
4) Create a user
5) Sign in with this user
6) Click on the tag in the tag cloud
Result: You can see the document name
Expected result: You can't see anything (even though the Tags cloud doesn't show you how many content is tagged)
- relates
-
LPE-13160 Users without proper permissions can see a Document's title via the Tag Cloud portlet
-
- Closed
-