[buddypress-trac] [BuddyPress] #3767: 1.5.1: Activity stream for private groups displayed to everyone!

buddypress-trac at lists.automattic.com buddypress-trac at lists.automattic.com
Fri Nov 25 16:58:13 UTC 2011


#3767: 1.5.1: Activity stream for private groups displayed to everyone!
---------------------------+-----------------------------
 Reporter:  johjoergensen  |      Owner:
     Type:  defect (bug)   |     Status:  new
 Priority:  normal         |  Milestone:  Awaiting Review
Component:  Groups         |    Version:  1.5.1
 Severity:  critical       |   Keywords:  needs-patch
---------------------------+-----------------------------
 I just realized that when logged out, the activity stream for private
 groups is displayed!
 This is a serious security concern!

 I run WP 3.2.1 + BP 1.5.1

-- 
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/3767>
BuddyPress <http://buddypress.org/>
BuddyPress


More information about the buddypress-trac mailing list