N°8612 - [SECU] Insecure Access to Inline Images

2026-02-26 13:44:19 +01:00 · 2026-02-26 11:52:14 +01:00
1 changed files with 1 additions and 0 deletions
--- a/pages/ajax.document.php
+++ b/pages/ajax.document.php
@@ -63,6 +63,7 @@ try {
 			break;

 		case 'download_inlineimage':
+			LoginWebPage::DoLoginEx();
 			// No login is required because the "secret" protects us
 			// Benefit: the inline image can be inserted into any HTML (templating = $this->html(public_log)$)
 			$id = utils::ReadParam('id', '');