Bug Report 949446: “i can see all source code of all projects”
949446 - Source Code Disclosure of every possible project















  
    
      Closed
      
        Bug 949446
      
      
        Opened 11 years ago
          Closed 11 years ago
      
        
    

  




    
      
        
        Categories
          
            (Websites :: other.mozilla.org, defect)
          
      
    
  




    
      
        
        Tracking
          
            (Not tracked)
          
      
    
  





    
      
        
        People
          
            (Reporter: shpendk13, Unassigned)
          
      
    
  







    
      
        
        Details
          
            (Keywords: reporter-external)
          
      
    
  






























User Agent: Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36

Steps to reproduce:

Bascilly, by going to http://viewvc.svn.mozilla.org/vc/projects/ you can view the source code of every website and project of mozilla. Not sure if this is supposed to be like this , or this is a major information disclosure vulnerability?


Actual results:

Went to http://viewvc.svn.mozilla.org/vc/projects/ and i can see all source code of all projects. No access controls at all.


Expected results:

Don't know, maybe ask for email&password combinationMozilla is open sournce, we share everything.Group: websites-securityStatus: UNCONFIRMED → RESOLVEDClosed: 11 years agoResolution: --- → WONTFIXAlright then, i thought so but reported just in case :).Component: blog.mozilla.org → other.mozilla.orgOh boy! Now I have access to everything!in order to prevent further off-topic/advocacy comments, i'm restricting comments on this bug.
          You need to log in
          before you can comment on or make changes to this bug.
        



