MantisBT: master-1.2.x c9314184

Author Committer Branch Timestamp Parent
atrol atrol master-1.2.x 2012-06-03 00:51 master-1.2.x 628e9370
Affected Issues  0014016: CVE-2012-2692 Users with access level >= update_bug_threshold can delete any attachment
Changeset

Additional patch to fix 0014016

First patch to fix the issue introduced access to undefined variable.

mod - api/soap/mc_issue_attachment_api.php Diff File