Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Unsecured endpoint: /api/catalogue/Users/search #435

Open
jamesrwelch opened this issue Sep 7, 2023 · 0 comments
Open

Unsecured endpoint: /api/catalogue/Users/search #435

jamesrwelch opened this issue Sep 7, 2023 · 0 comments
Labels
bug Something isn't working security This issue relates to a potential security risk

Comments

@jamesrwelch
Copy link
Contributor

The user search endpoint is not properly secured, meaning that public users are able to see list of users (name, email address). This endpoint should be restricted to authenticated users only.
Check that similar endpoints do not also share this issue.
@jamesrwelch jamesrwelch added bug Something isn't working security This issue relates to a potential security risk labels Sep 7, 2023
@jamesrwelch jamesrwelch mentioned this issue Sep 7, 2023
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working security This issue relates to a potential security risk
Projects
MDM State
Status: Backlog
Milestone
No milestone
Development

No branches or pull requests
1 participant
@jamesrwelch