• Welcome to the Chevereto User Community!

    Here, users from all over the world come together to learn, share, and collaborate on everything related to Chevereto. It's a place to exchange ideas, ask questions, and help improve the software.

    Please keep in mind:

    • This community is user-driven. Always be polite and respectful to others.
    • Support development by purchasing a Chevereto license, which also gives you priority support.
    • Go further by joining the Community Subscription for even faster response times and to help sustain this space

Work in progress Chevereto v5.0.0 announcement

Fixed /json exposing liked content from private profiles

Fixed a bug (CWE-862: Missing Authorization) that was allowing anyone to list content liked by private user.
 
Fixed /json exposing followed content from private profiles

Fixed a bug (CWE-862: Missing Authorization) that was allowing anyone to list content followed by private user.
 
You must log in or register to reply here.
Back
Top