Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[BUG] Backups accesible to every user #208

Closed
1 of 4 tasks
okrplay opened this issue Mar 4, 2021 · 1 comment · Fixed by #207
Closed
1 of 4 tasks

[BUG] Backups accesible to every user #208

okrplay opened this issue Mar 4, 2021 · 1 comment · Fixed by #207
Assignees
@zekroTJA
Labels
bug Something isn't working vulnerability

Comments

@okrplay
Copy link

okrplay commented Mar 4, 2021

Type of Bug

  • Typo
  • Minor
  • Major
  • Crash

Description

When using the Shinpuru web-interface, you can download and view backups of every server you're a member of and that's using Shinpuru. This may expose data the server owner doesn't want to be public.

Steps to Reproduce

Download the backup of one of the servers shown in the Shinpuru dashboard.
@okrplay okrplay added the bug Something isn't working label Mar 4, 2021
@okrplay
Copy link
Author

okrplay commented Mar 4, 2021

Please note that this may also be possible directly via the Discord API, I'm not sure about that though.

@zekroTJA zekroTJA mentioned this issue Mar 5, 2021
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@zekroTJA zekroTJA

Labels
bug Something isn't working vulnerability
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

WIP: release 1.9.0 zekroTJA/shinpuru
2 participants
@zekroTJA @okrplay