Mailinglist Archive: opensuse-bugs (6133 mails)

< Previous Next >
[Bug 619304] New: news.opensuse.org reveals E-Mail addresses of other users
  • From: bugzilla_noreply@xxxxxxxxxx
  • Date: Thu, 1 Jul 2010 20:34:30 +0000
  • Message-id: <bug-619304-21960@xxxxxxxxxxxxxxxxxxxxxxxx/>
http://bugzilla.novell.com/show_bug.cgi?id=619304

http://bugzilla.novell.com/show_bug.cgi?id=619304#c0


Summary: news.opensuse.org reveals E-Mail addresses of other
users
Classification: openSUSE
Product: openSUSE.org
Version: unspecified
Platform: Other
OS/Version: Other
Status: NEW
Severity: Critical
Priority: P5 - None
Component: Infrastructure
AssignedTo: mrueckert@xxxxxxxxxx
ReportedBy: robin.knapp@xxxxxxxxxxxxxx
QAContact: lrupp@xxxxxxxxxx
Found By: ---
Blocker: ---


User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2.6)
Gecko/20100625 Firefox/3.6.6

From time to time when visiting a blog entry on news.opensuse.org, the name and
email address of another user is pre-filled in the comment form.

I have no idea how to reproduce or analyze this issue.

Maybe this information helps:
- I just had it again, saw name and email of user "chucktr" (don't remember
exactly)
- I immediately hit reload and then saw my name and email address
- It was the first article I visited today on news.opensuse.org
- article was:
http://news.opensuse.org/2010/07/01/opensuse-checking-instrumentation-prepare-for-landing-opensuse-11-3-rc2-now-available/
- user chucktr did not comment on this article

Reproducible: Sometimes

Steps to Reproduce:
view an article on news.opensuse.org
Actual Results:
comment fields are sometimes prepopulated with name and email of another user

Expected Results:
comment fields should be empty or pre-populated with information from local
cookie

--
Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

< Previous Next >