diff options
| author | Haelwenn <contact+git.pleroma.social@hacktivis.me> | 2023-09-03 12:12:44 +0000 |
|---|---|---|
| committer | Haelwenn <contact+git.pleroma.social@hacktivis.me> | 2023-09-03 12:12:44 +0000 |
| commit | f966abe4fbacf8fa91cf2b533f8abfb57d62f8b7 (patch) | |
| tree | 14c3999daac4222947c3e707ccfbaf34da5ec122 /changelog.d/check-attachment-attribution.security | |
| parent | 1f4be2b3495b6df03843f923a53aff5913e1ef0d (diff) | |
| parent | 385492577d11e9667064d7f7e0dacdc00457064a (diff) | |
| download | pleroma-f966abe4fbacf8fa91cf2b533f8abfb57d62f8b7.tar.gz pleroma-f966abe4fbacf8fa91cf2b533f8abfb57d62f8b7.zip | |
Merge branch 'release/2.5.5' into 'stable'
Release 2.5.5
See merge request pleroma/pleroma!3949
Diffstat (limited to 'changelog.d/check-attachment-attribution.security')
| -rw-r--r-- | changelog.d/check-attachment-attribution.security | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/changelog.d/check-attachment-attribution.security b/changelog.d/check-attachment-attribution.security new file mode 100644 index 000000000..e0e46525b --- /dev/null +++ b/changelog.d/check-attachment-attribution.security @@ -0,0 +1 @@ +CommonAPI: Prevent users from accessing media of other users by creating a status with reused attachment ID |