-
Incident report
-
Resolution: Fixed
-
Minor
-
None
-
1.6.8
-
None
-
Debian Lenny 5.0.4
Apache 2.2.9-10+lenny6
PHP 5.2.6.dfsg.1-1+lenny4
MySQL 5.0.51a-24+lenny2+spu1
Links to external page in elements get the Session ID added.
Created a map with an element.
The element URL is pointing to an external wiki page for information regarding the element.
Through the GUI, while klicking the element in the map the Session ID is added to the URL.
-> https://wiki/index.php/QuickSheet?sid=62d10321f5296229
if an sub page is selected within the Wiki the Session ID is added in between the URL after the # sign and the part is added as duplicate.
-> https://wiki/index.php/QuickSheet#Java_Exim_Connector?sid=62d10321f5296229#Java_Exim_Connector
Session ID's forwarded to an external URL could be risk.