MantisBT: master-2.28 77d25d37

Diff Back to Repository
Author Committer Branch Timestamp Parent
dregad dregad master-2.28 2026-05-02 06:25 master-2.28 9e8409cd
Affected Issues  0036985: CVE-2026-42071: REST Issue File Listing Leaks Attachments From Hidden Private Bugnotes
Changeset

Add $p_bug_id parameter

file_can_download_bugnote_attachments() function's callers usually
already know the bug id. This avoids an unnecessary bugnote_get_field()
call.

Issue 0036985
mod - core/file_api.php Diff File
mod - file_download.php Diff File