Dominic Hargreaves
2011-Feb-22 11:46 UTC
[Secure-testing-team] Bug#614576: request-tracker3.8: Scrip information leakage
Package: request-tracker3.8
Version: 3.8.8-7
Severity: important
Tags: security
The following appears in the changelog of 3.8.9:
* Clone Scrip''s TicketObj since we change the CurrentUser and it can
leak
information (Custom field values, etc)
This may warrant an update in s-p-u.