Frédéric Buclin
2011-12-28 14:18:06
Revision ID: lpsolit@gmail.com-20111228221806-n7fwim1ft538bexd
Bug 711714: (CVE-2011-3667) [SECURITY] The User.offer_account_by_email WebService method lets you create new user accounts independently of the value of Bugzilla::Auth::Verify::*::user_can_create_account
r=dkl a=LpSolit