1 |
DENIED
|
ROLE_USER
|
null |
|
Show voter details
|
2 |
DENIED
|
moderate
|
App\Entity\Entry {#1859
+user: Proxies\__CG__\App\Entity\User {#1884 …}
+magazine: App\Entity\Magazine {#289
+icon: null
+name: "announcements@lemmy.ml"
+title: "announcements"
+description: """
Official announcements from the Lemmy project. Subscribe to this community or add it to your RSS reader in order to be notified about new releases and important updates.\n
\n
You can also find major news on [join-lemmy.org](https://join-lemmy.org/news)
"""
+rules: null
+subscriptionsCount: 1
+entryCount: 6
+entryCommentCount: 455
+postCount: 0
+postCommentCount: 0
+isAdult: false
+customCss: null
+lastActive: DateTime @1729471730 {#297
date: 2024-10-21 02:48:50.0 +02:00
}
+markedForDeletionAt: null
+tags: null
+moderators: Doctrine\ORM\PersistentCollection {#277 …}
+ownershipRequests: Doctrine\ORM\PersistentCollection {#273 …}
+moderatorRequests: Doctrine\ORM\PersistentCollection {#262 …}
+entries: Doctrine\ORM\PersistentCollection {#220 …}
+posts: Doctrine\ORM\PersistentCollection {#178 …}
+subscriptions: Doctrine\ORM\PersistentCollection {#240 …}
+bans: Doctrine\ORM\PersistentCollection {#157 …}
+reports: Doctrine\ORM\PersistentCollection {#143 …}
+badges: Doctrine\ORM\PersistentCollection {#121 …}
+logs: Doctrine\ORM\PersistentCollection {#111 …}
+awards: Doctrine\ORM\PersistentCollection {#100 …}
+categories: Doctrine\ORM\PersistentCollection {#87 …}
-id: 131
+apId: "announcements@lemmy.ml"
+apProfileId: "https://lemmy.ml/c/announcements"
+apPublicUrl: "https://lemmy.ml/c/announcements"
+apFollowersUrl: "https://lemmy.ml/c/announcements/followers"
+apInboxUrl: "https://lemmy.ml/inbox"
+apDomain: "lemmy.ml"
+apPreferredUsername: "announcements"
+apDiscoverable: true
+apManuallyApprovesFollowers: null
+privateKey: null
+publicKey: null
+apFetchedAt: DateTime @1703918407 {#298
date: 2023-12-30 07:40:07.0 +01:00
}
+apDeletedAt: null
+apTimeoutAt: null
+visibility: "visible "
+createdAt: DateTimeImmutable @1703918407 {#292
date: 2023-12-30 07:40:07.0 +01:00
}
}
+image: Proxies\__CG__\App\Entity\Image {#1951 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2482 …}
+slug: "Lemmy-Security-Advisory-for-Versions-0-19-1-Private-message-details-leak"
+title: "Lemmy Security Advisory for Versions < `0.19.1`: Private message details leak."
+url: "https://github.com/LemmyNet/lemmy/security/advisories/GHSA-r64r-5h43-26qv"
+body: """
The full description of the bug is in the linked issue above, but the short version is:\n
\n
Our `CreatePrivateMessageReport` endpoint had a bug that would allow anyone, not just the recipient, to create a report, and then receive the details about private messages.\n
\n
This allowed anyone to iterate over ids, creating thousands of reports in order to receive details about private messages.\n
\n
Since those reports are visible to admins, it would be easy to discover if someone was abusing this, and luckily we haven’t heard of anyone doing so on production instances (so far).\n
\n
If you haven’t, please be sure to upgrade to at least `0.19.1` for the fix.\n
\n
Many thanks to @Nothing4You for finding this one.
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 11
+favouriteCount: 98
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1728391163 {#1849
date: 2024-10-08 14:39:23.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: [
"@Nothing4You"
]
+comments: Doctrine\ORM\PersistentCollection {#2410 …}
+votes: Doctrine\ORM\PersistentCollection {#1896 …}
+reports: Doctrine\ORM\PersistentCollection {#1900 …}
+favourites: Doctrine\ORM\PersistentCollection {#1397 …}
+notifications: Doctrine\ORM\PersistentCollection {#1371 …}
+badges: Doctrine\ORM\PersistentCollection {#1379 …}
+children: []
-id: 32805
-titleTs: "'0.19.1':6 'advisori':3 'detail':9 'leak':10 'lemmi':1 'messag':8 'privat':7 'secur':2 'version':5"
-bodyTs: "'0.19.1':108 'abus':79 'admin':69 'allow':26,45 'anyon':27,46,88 'bug':6,23 'creat':33,51 'createprivatemessagereport':19 'descript':3 'detail':40,59 'discov':75 'easi':73 'endpoint':20 'far':95 'find':117 'fix':111 'full':2 'haven':84,98 'heard':86 'id':50 'instanc':93 'issu':11 'iter':48 'least':107 'link':10 'luckili':82 'mani':112 'messag':43,62 'nothing4you':115 'one':119 'order':56 'pleas':100 'privat':42,61 'product':92 'receiv':38,58 'recipi':31 'report':35,54,65 'short':15 'sinc':63 'someon':77 'sure':102 'thank':113 'thousand':52 'upgrad':104 'version':16 'visibl':67 'would':25,71"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1706197302
+visibility: "visible "
+apId: "https://lemmy.ml/post/10980384"
+editedAt: DateTimeImmutable @1728386330 {#91
date: 2024-10-08 13:18:50.0 +02:00
}
+createdAt: DateTimeImmutable @1706110902 {#1819
date: 2024-01-24 16:41:42.0 +01:00
}
} |
|
Show voter details
|
3 |
DENIED
|
edit
|
App\Entity\Entry {#1859
+user: Proxies\__CG__\App\Entity\User {#1884 …}
+magazine: App\Entity\Magazine {#289
+icon: null
+name: "announcements@lemmy.ml"
+title: "announcements"
+description: """
Official announcements from the Lemmy project. Subscribe to this community or add it to your RSS reader in order to be notified about new releases and important updates.\n
\n
You can also find major news on [join-lemmy.org](https://join-lemmy.org/news)
"""
+rules: null
+subscriptionsCount: 1
+entryCount: 6
+entryCommentCount: 455
+postCount: 0
+postCommentCount: 0
+isAdult: false
+customCss: null
+lastActive: DateTime @1729471730 {#297
date: 2024-10-21 02:48:50.0 +02:00
}
+markedForDeletionAt: null
+tags: null
+moderators: Doctrine\ORM\PersistentCollection {#277 …}
+ownershipRequests: Doctrine\ORM\PersistentCollection {#273 …}
+moderatorRequests: Doctrine\ORM\PersistentCollection {#262 …}
+entries: Doctrine\ORM\PersistentCollection {#220 …}
+posts: Doctrine\ORM\PersistentCollection {#178 …}
+subscriptions: Doctrine\ORM\PersistentCollection {#240 …}
+bans: Doctrine\ORM\PersistentCollection {#157 …}
+reports: Doctrine\ORM\PersistentCollection {#143 …}
+badges: Doctrine\ORM\PersistentCollection {#121 …}
+logs: Doctrine\ORM\PersistentCollection {#111 …}
+awards: Doctrine\ORM\PersistentCollection {#100 …}
+categories: Doctrine\ORM\PersistentCollection {#87 …}
-id: 131
+apId: "announcements@lemmy.ml"
+apProfileId: "https://lemmy.ml/c/announcements"
+apPublicUrl: "https://lemmy.ml/c/announcements"
+apFollowersUrl: "https://lemmy.ml/c/announcements/followers"
+apInboxUrl: "https://lemmy.ml/inbox"
+apDomain: "lemmy.ml"
+apPreferredUsername: "announcements"
+apDiscoverable: true
+apManuallyApprovesFollowers: null
+privateKey: null
+publicKey: null
+apFetchedAt: DateTime @1703918407 {#298
date: 2023-12-30 07:40:07.0 +01:00
}
+apDeletedAt: null
+apTimeoutAt: null
+visibility: "visible "
+createdAt: DateTimeImmutable @1703918407 {#292
date: 2023-12-30 07:40:07.0 +01:00
}
}
+image: Proxies\__CG__\App\Entity\Image {#1951 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2482 …}
+slug: "Lemmy-Security-Advisory-for-Versions-0-19-1-Private-message-details-leak"
+title: "Lemmy Security Advisory for Versions < `0.19.1`: Private message details leak."
+url: "https://github.com/LemmyNet/lemmy/security/advisories/GHSA-r64r-5h43-26qv"
+body: """
The full description of the bug is in the linked issue above, but the short version is:\n
\n
Our `CreatePrivateMessageReport` endpoint had a bug that would allow anyone, not just the recipient, to create a report, and then receive the details about private messages.\n
\n
This allowed anyone to iterate over ids, creating thousands of reports in order to receive details about private messages.\n
\n
Since those reports are visible to admins, it would be easy to discover if someone was abusing this, and luckily we haven’t heard of anyone doing so on production instances (so far).\n
\n
If you haven’t, please be sure to upgrade to at least `0.19.1` for the fix.\n
\n
Many thanks to @Nothing4You for finding this one.
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 11
+favouriteCount: 98
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1728391163 {#1849
date: 2024-10-08 14:39:23.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: [
"@Nothing4You"
]
+comments: Doctrine\ORM\PersistentCollection {#2410 …}
+votes: Doctrine\ORM\PersistentCollection {#1896 …}
+reports: Doctrine\ORM\PersistentCollection {#1900 …}
+favourites: Doctrine\ORM\PersistentCollection {#1397 …}
+notifications: Doctrine\ORM\PersistentCollection {#1371 …}
+badges: Doctrine\ORM\PersistentCollection {#1379 …}
+children: []
-id: 32805
-titleTs: "'0.19.1':6 'advisori':3 'detail':9 'leak':10 'lemmi':1 'messag':8 'privat':7 'secur':2 'version':5"
-bodyTs: "'0.19.1':108 'abus':79 'admin':69 'allow':26,45 'anyon':27,46,88 'bug':6,23 'creat':33,51 'createprivatemessagereport':19 'descript':3 'detail':40,59 'discov':75 'easi':73 'endpoint':20 'far':95 'find':117 'fix':111 'full':2 'haven':84,98 'heard':86 'id':50 'instanc':93 'issu':11 'iter':48 'least':107 'link':10 'luckili':82 'mani':112 'messag':43,62 'nothing4you':115 'one':119 'order':56 'pleas':100 'privat':42,61 'product':92 'receiv':38,58 'recipi':31 'report':35,54,65 'short':15 'sinc':63 'someon':77 'sure':102 'thank':113 'thousand':52 'upgrad':104 'version':16 'visibl':67 'would':25,71"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1706197302
+visibility: "visible "
+apId: "https://lemmy.ml/post/10980384"
+editedAt: DateTimeImmutable @1728386330 {#91
date: 2024-10-08 13:18:50.0 +02:00
}
+createdAt: DateTimeImmutable @1706110902 {#1819
date: 2024-01-24 16:41:42.0 +01:00
}
} |
|
Show voter details
|
4 |
DENIED
|
moderate
|
App\Entity\Entry {#1859
+user: Proxies\__CG__\App\Entity\User {#1884 …}
+magazine: App\Entity\Magazine {#289
+icon: null
+name: "announcements@lemmy.ml"
+title: "announcements"
+description: """
Official announcements from the Lemmy project. Subscribe to this community or add it to your RSS reader in order to be notified about new releases and important updates.\n
\n
You can also find major news on [join-lemmy.org](https://join-lemmy.org/news)
"""
+rules: null
+subscriptionsCount: 1
+entryCount: 6
+entryCommentCount: 455
+postCount: 0
+postCommentCount: 0
+isAdult: false
+customCss: null
+lastActive: DateTime @1729471730 {#297
date: 2024-10-21 02:48:50.0 +02:00
}
+markedForDeletionAt: null
+tags: null
+moderators: Doctrine\ORM\PersistentCollection {#277 …}
+ownershipRequests: Doctrine\ORM\PersistentCollection {#273 …}
+moderatorRequests: Doctrine\ORM\PersistentCollection {#262 …}
+entries: Doctrine\ORM\PersistentCollection {#220 …}
+posts: Doctrine\ORM\PersistentCollection {#178 …}
+subscriptions: Doctrine\ORM\PersistentCollection {#240 …}
+bans: Doctrine\ORM\PersistentCollection {#157 …}
+reports: Doctrine\ORM\PersistentCollection {#143 …}
+badges: Doctrine\ORM\PersistentCollection {#121 …}
+logs: Doctrine\ORM\PersistentCollection {#111 …}
+awards: Doctrine\ORM\PersistentCollection {#100 …}
+categories: Doctrine\ORM\PersistentCollection {#87 …}
-id: 131
+apId: "announcements@lemmy.ml"
+apProfileId: "https://lemmy.ml/c/announcements"
+apPublicUrl: "https://lemmy.ml/c/announcements"
+apFollowersUrl: "https://lemmy.ml/c/announcements/followers"
+apInboxUrl: "https://lemmy.ml/inbox"
+apDomain: "lemmy.ml"
+apPreferredUsername: "announcements"
+apDiscoverable: true
+apManuallyApprovesFollowers: null
+privateKey: null
+publicKey: null
+apFetchedAt: DateTime @1703918407 {#298
date: 2023-12-30 07:40:07.0 +01:00
}
+apDeletedAt: null
+apTimeoutAt: null
+visibility: "visible "
+createdAt: DateTimeImmutable @1703918407 {#292
date: 2023-12-30 07:40:07.0 +01:00
}
}
+image: Proxies\__CG__\App\Entity\Image {#1951 …}
+domain: Proxies\__CG__\App\Entity\Domain {#2482 …}
+slug: "Lemmy-Security-Advisory-for-Versions-0-19-1-Private-message-details-leak"
+title: "Lemmy Security Advisory for Versions < `0.19.1`: Private message details leak."
+url: "https://github.com/LemmyNet/lemmy/security/advisories/GHSA-r64r-5h43-26qv"
+body: """
The full description of the bug is in the linked issue above, but the short version is:\n
\n
Our `CreatePrivateMessageReport` endpoint had a bug that would allow anyone, not just the recipient, to create a report, and then receive the details about private messages.\n
\n
This allowed anyone to iterate over ids, creating thousands of reports in order to receive details about private messages.\n
\n
Since those reports are visible to admins, it would be easy to discover if someone was abusing this, and luckily we haven’t heard of anyone doing so on production instances (so far).\n
\n
If you haven’t, please be sure to upgrade to at least `0.19.1` for the fix.\n
\n
Many thanks to @Nothing4You for finding this one.
"""
+type: "link"
+lang: "en"
+isOc: false
+hasEmbed: false
+commentCount: 11
+favouriteCount: 98
+score: 0
+isAdult: false
+sticky: false
+lastActive: DateTime @1728391163 {#1849
date: 2024-10-08 14:39:23.0 +02:00
}
+ip: null
+adaAmount: 0
+tags: null
+mentions: [
"@Nothing4You"
]
+comments: Doctrine\ORM\PersistentCollection {#2410 …}
+votes: Doctrine\ORM\PersistentCollection {#1896 …}
+reports: Doctrine\ORM\PersistentCollection {#1900 …}
+favourites: Doctrine\ORM\PersistentCollection {#1397 …}
+notifications: Doctrine\ORM\PersistentCollection {#1371 …}
+badges: Doctrine\ORM\PersistentCollection {#1379 …}
+children: []
-id: 32805
-titleTs: "'0.19.1':6 'advisori':3 'detail':9 'leak':10 'lemmi':1 'messag':8 'privat':7 'secur':2 'version':5"
-bodyTs: "'0.19.1':108 'abus':79 'admin':69 'allow':26,45 'anyon':27,46,88 'bug':6,23 'creat':33,51 'createprivatemessagereport':19 'descript':3 'detail':40,59 'discov':75 'easi':73 'endpoint':20 'far':95 'find':117 'fix':111 'full':2 'haven':84,98 'heard':86 'id':50 'instanc':93 'issu':11 'iter':48 'least':107 'link':10 'luckili':82 'mani':112 'messag':43,62 'nothing4you':115 'one':119 'order':56 'pleas':100 'privat':42,61 'product':92 'receiv':38,58 'recipi':31 'report':35,54,65 'short':15 'sinc':63 'someon':77 'sure':102 'thank':113 'thousand':52 'upgrad':104 'version':16 'visibl':67 'would':25,71"
+cross: false
+upVotes: 0
+downVotes: 0
+ranking: 1706197302
+visibility: "visible "
+apId: "https://lemmy.ml/post/10980384"
+editedAt: DateTimeImmutable @1728386330 {#91
date: 2024-10-08 13:18:50.0 +02:00
}
+createdAt: DateTimeImmutable @1706110902 {#1819
date: 2024-01-24 16:41:42.0 +01:00
}
} |
|
Show voter details
|
5 |
DENIED
|
edit
|
App\Entity\Magazine {#289
+icon: null
+name: "announcements@lemmy.ml"
+title: "announcements"
+description: """
Official announcements from the Lemmy project. Subscribe to this community or add it to your RSS reader in order to be notified about new releases and important updates.\n
\n
You can also find major news on [join-lemmy.org](https://join-lemmy.org/news)
"""
+rules: null
+subscriptionsCount: 1
+entryCount: 6
+entryCommentCount: 455
+postCount: 0
+postCommentCount: 0
+isAdult: false
+customCss: null
+lastActive: DateTime @1729471730 {#297
date: 2024-10-21 02:48:50.0 +02:00
}
+markedForDeletionAt: null
+tags: null
+moderators: Doctrine\ORM\PersistentCollection {#277 …}
+ownershipRequests: Doctrine\ORM\PersistentCollection {#273 …}
+moderatorRequests: Doctrine\ORM\PersistentCollection {#262 …}
+entries: Doctrine\ORM\PersistentCollection {#220 …}
+posts: Doctrine\ORM\PersistentCollection {#178 …}
+subscriptions: Doctrine\ORM\PersistentCollection {#240 …}
+bans: Doctrine\ORM\PersistentCollection {#157 …}
+reports: Doctrine\ORM\PersistentCollection {#143 …}
+badges: Doctrine\ORM\PersistentCollection {#121 …}
+logs: Doctrine\ORM\PersistentCollection {#111 …}
+awards: Doctrine\ORM\PersistentCollection {#100 …}
+categories: Doctrine\ORM\PersistentCollection {#87 …}
-id: 131
+apId: "announcements@lemmy.ml"
+apProfileId: "https://lemmy.ml/c/announcements"
+apPublicUrl: "https://lemmy.ml/c/announcements"
+apFollowersUrl: "https://lemmy.ml/c/announcements/followers"
+apInboxUrl: "https://lemmy.ml/inbox"
+apDomain: "lemmy.ml"
+apPreferredUsername: "announcements"
+apDiscoverable: true
+apManuallyApprovesFollowers: null
+privateKey: null
+publicKey: null
+apFetchedAt: DateTime @1703918407 {#298
date: 2023-12-30 07:40:07.0 +01:00
}
+apDeletedAt: null
+apTimeoutAt: null
+visibility: "visible "
+createdAt: DateTimeImmutable @1703918407 {#292
date: 2023-12-30 07:40:07.0 +01:00
}
} |
|
Show voter details
|