Skip to content

GitLab

  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • fusiondirectory fusiondirectory
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 34
    • Issues 34
    • List
    • Boards
    • Service Desk
    • Milestones
  • Deployments
    • Deployments
    • Releases
  • Packages & Registries
    • Packages & Registries
    • Container Registry
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • fusiondirectory
  • fusiondirectoryfusiondirectory
  • Issues
  • #3263
Closed
Open
Created Aug 08, 2014 by Jonathan Swaelens@jswaelensDeveloper

Login with expire password work if we modify the URL

The password of user 'c' is expired.

I try to login with 'c' and it is refused. I modify the URL <IP_FD>/fusiondirectory/index.php in <IP_FD>/fusiondirectory/main.php

And I connect with the user 'c'.

(from redmine: issue id 3263, created on 2014-08-08, closed on 2014-08-11)

  • Changesets:
    • Revision 8fda542b by Côme Chilliet on 2014-08-11T07:56:03.000Z:
Fixes #3263 Fixed vulnerability in user expiration system
  • Revision e6c5e67b by Côme Chilliet on 2014-08-11T07:56:53.000Z:
Fixes #3263 Fixed vulnerability in user expiration system
  • Custom Fields:
    • Bug in version: 1.0.8
  • Uploads:
    • 0001-Fixes-3263-Fixed-vulnerability-in-user-expiration-sy.patch
Assignee
Assign to
Time tracking