Change Details

To reproduce: * Revision-delete a revision with suppression. * As a user with viewsuppressed but not suppressrevision, construct a url to action=revisiondelete that includes both the suppressed revision and any newer non-suppressed revision. ** You will be presented with the usual "change" form. * Submit the form. The revision-deletion settings on the suppressed revision will be changed, including removal of the suppression. --- **patch: {F110631}** * 1.26 - same as master ({F2558076}) * 1.25 - {F2724580} * 1.24 - {F2724606} **affected versions: 1.24.0 - 1.25.2** **type:** Missing Authorization (CWE-862)

To reproduce: * Revision-delete a revision with suppression. * As a user with viewsuppressed but not suppressrevision, construct a url to action=revisiondelete that includes both the suppressed revision and any newer non-suppressed revision. ** You will be presented with the usual "change" form. * Submit the form. The revision-deletion settings on the suppressed revision will be changed, including removal of the suppression. --- **patch: {F110631}** * 1.26 - same as master ({F2558076}) * 1.25 - {F2724580} * 1.24 - {F2724606} **affected versions: 1.24.0 - 1.25.2** **type:** Missing Authorization (CWE-862) **CVE:** CVE-2015-8004

To reproduce: * Revision-delete a revision with suppression. * As a user with viewsuppressed but not suppressrevision, construct a url to action=revisiondelete that includes both the suppressed revision and any newer non-suppressed revision. ** You will be presented with the usual "change" form. * Submit the form. The revision-deletion settings on the suppressed revision will be changed, including removal of the suppression. --- **patch: {F110631}** * 1.26 - same as master ({F2558076}) * 1.25 - {F2724580} * 1.24 - {F2724606} **affected versions: 1.24.0 - 1.25.2** **type:** Missing Authorization (CWE-862) **CVE:** CVE-2015-8004