MSA-21-0008: User full name disclosure within online users block
It was possible for some users without permission to view other users' full names to do so via the online users block.
Severity/Risk: | Minor |
Versions affected: | 3.10 to 3.10.1, 3.9 to 3.9.4, 3.8 to 3.8.7, 3.5 to 3.5.16 and earlier unsupported versions |
Versions fixed: | 3.10.2, 3.9.5, 3.8.8 and 3.5.17 |
Reported by: | Ankit Agarwal |
Workarou |