Security bug

  • Resolved isrableki

    (@isrableki)


    5 years, 9 months ago

    It appears there is a security bug in the file /awesome-support/includes/admin/metaboxes/stakeholders.php where an agent without the assign_ticket capability can actually assign the ticket to any agent.

    This bug is present only when the option ‘Use SELECT2 For Staff Drop-downs’ is unchecked (normal dropdown).

  • The topic ‘Security bug’ is closed to new replies.