Pivity

Security Issue within GExtension

Last read Never
#1

Dear gmodstore community,


two days ago I've found a security thread within Gextension by ibot3 .

Basically it allows users to modify settings they shouldn't be able to.

The user can send an link to an administrator and the administrator will change settings in background without even knowing it.


I contacted ibot3 about this issue but haven't got any answer yet.

Jakob if you're reading this, please fix it, I can send prove if needed.


Sincerly,

Fun-Server.de

#2

I am on vacation and as I wrote on the support portal it can take up to 3 days for a response.

I am aware of the problem and it will be fixed soon. However it is not a very easy attack scenario and requires carelessness of an admin to work.

Agree x 1Funny x 1
Users viewing this thread
Nobody