Kunena 6.3.8 Released

The Kunena team has announce the arrival of Kunena 6.3.8 [K 6.3.8] in stable which is now available for download as a native Joomla extension for J! 4.4.x/5.0.x/5.1.x/5.2.x. This version addresses most of the issues that were discovered in K 6.2 / K 6.3 and issues discovered during the last development stages of K 6.3
Note: Please go to the Kunena Dashboard after an upgrade so that the Kunena database tables are also updated.

Topics must relate to a currently supported version of Kunena. If you are unsure what is the current supported version of Kunena, please go to the download page.

If you are having problems then, for your own benefit, it would save us all a lot of time if you would kindly post your configuration report when you ask for help from this forum. If you do not post your configuration report we will not ask you for it but you will probably not get your problem solved, either.

Question Information disclosure when reporting posts.

More
6 years 11 months ago - 6 years 11 months ago #1 by heyai
Information disclosure when reporting posts. was created by heyai
Aloha,

This is a real fringe scenario, but you should know.

When a user reports a post, e-mails are sent to moderators.
In this case, emails are sent using SMTP.
A moderator has an e-mail address from the same domain as the SMTP domain.
The moderator's e-mail address was deleted from the server but is still set in their user account.

Now, the SMTP server returns an error message about the e-mail not existing, this error is displayed to the user.

So, yeah, there is information disclosure about e no-longer existing e-mail address.

This message contains confidential information

Database collation check: The collation of your table fields are correct

Joomla! SEF: Enabled | Joomla! SEF rewrite: Enabled | FTP layer: Disabled |

This message contains confidential information
htaccess: Exists | PHP environment: Max execution time: 300 seconds | Max execution memory: 256M | Max file upload: 8M

Kunena menu details:

Warning: Spoiler!

Joomla default template details : protostar | author: Kyle Ledbetter | version: 1.0 | creationdate: 4/30/2012

Kunena default template details : Crypsis | author: Kunena Team | version: 5.0.13 | creationdate: 2017-12-31

Kunena template params:

Warning: Spoiler!

Kunena version detailed: Kunena 5.0.13 | 2017-12-31 [ Meerkat ]
| Kunena detailed configuration:

Warning: Spoiler!
| Kunena integration settings:
Warning: Spoiler!
| Joomla! detailed language files installed:
Warning: Spoiler!

Third-party components: CommunityBuilder 2.1.3 | UddeIM 4.0

Third-party SEF components: None

Plugins: Search - Kunena Search 5.0.3 | Content - Kunena Discuss 5.0.3

Modules: Kunena Latest 5.0.3 | Kunena Stats 5.0.3 | Kunena Search 5.0.3

I hope I described this well enough. Let me know if you have questions (or tell me I'm a wacko).
Attachments:
Last edit: 6 years 11 months ago by heyai.

Please Log in or Create an account to join the conversation.

More
6 years 11 months ago #2 by xillibit
Replied by xillibit on topic Information disclosure when reporting posts.
Hello,

This kind of error is throw by Joomla! directly, i'am agree with you this kind shouldn't be shown at every user
I don't provide support by PM, because this can be useful for someone else.

Please Log in or Create an account to join the conversation.

Time to create page: 0.607 seconds