teambox icon indicating copy to clipboard operation
teambox copied to clipboard

Published 20 hours ago • verified publisher icon redbooth

Hide people's data exports

Open sunny opened this issue 13 years ago • 3 comments

Without this patch, you can see other people's data exports, e.g : https://teambox.com/datas/2336

sunny avatar Feb 06 '12 21:02 sunny

May I add that this is a live security hole ?

Anybody can see the list of data exports from other people's account. The "space150 scrum" project I'm referring was probably made by @space150 and by poking into other export ids you can get to a lot of exports : https://teambox.com/datas/1045 https://teambox.com/datas/1045 https://teambox.com/datas/1985 https://teambox.com/datas/2009 …

sunny avatar Mar 08 '12 12:03 sunny

Cough.

sunny avatar Oct 04 '16 16:10 sunny

Yearly cough.

sunny avatar Nov 14 '17 15:11 sunny