activation: security hole if you activate a new item
----------------------------------------------------
Key: MAGNOLIA-2021
URL: http://jira.magnolia.info/browse/MAGNOLIA-2021
Project: Magnolia
Issue Type: Bug
Components: activation
Affects Versions: 3.5.2
Reporter: Philipp Bracher
Assignee: Philipp Bracher
Priority: Blocker
Fix For: 3.5.4
The url /ActivationHandler is not protected and if you activate a new item the
security checks are bypassed (import)
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.magnolia.info/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
----------------------------------------------------------------
for list details see
http://documentation.magnolia.info/docs/en/editor/stayupdated.html
----------------------------------------------------------------
