http://bugzilla.novell.com/show_bug.cgi?id=619304 http://bugzilla.novell.com/show_bug.cgi?id=619304#c0 Summary: news.opensuse.org reveals E-Mail addresses of other users Classification: openSUSE Product: openSUSE.org Version: unspecified Platform: Other OS/Version: Other Status: NEW Severity: Critical Priority: P5 - None Component: Infrastructure AssignedTo: mrueckert@novell.com ReportedBy: robin.knapp@ts.fujitsu.com QAContact: lrupp@novell.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6
From time to time when visiting a blog entry on news.opensuse.org, the name and email address of another user is pre-filled in the comment form.
I have no idea how to reproduce or analyze this issue. Maybe this information helps: - I just had it again, saw name and email of user "chucktr" (don't remember exactly) - I immediately hit reload and then saw my name and email address - It was the first article I visited today on news.opensuse.org - article was: http://news.opensuse.org/2010/07/01/opensuse-checking-instrumentation-prepar... - user chucktr did not comment on this article Reproducible: Sometimes Steps to Reproduce: view an article on news.opensuse.org Actual Results: comment fields are sometimes prepopulated with name and email of another user Expected Results: comment fields should be empty or pre-populated with information from local cookie -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.