[wp-trac] [WordPress Trac] #52169: REST API - User route security issue

WordPress Trac noreply at wordpress.org
Thu Dec 24 06:19:33 UTC 2020


#52169: REST API - User route security issue
--------------------------+-----------------------
 Reporter:  rajanit2000   |       Owner:  (none)
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  REST API      |     Version:  5.6
 Severity:  normal        |  Resolution:  invalid
 Keywords:                |     Focuses:  rest-api
--------------------------+-----------------------
Changes (by TimothyBlynJacobs):

 * status:  new => closed
 * resolution:   => invalid
 * milestone:  Awaiting Review =>


Comment:

 Hi @rajanit2000,

 Disclosures of usernames is not a security issue. For more info read:
 https://make.wordpress.org/core/handbook/testing/reporting-security-
 vulnerabilities/#why-are-disclosures-of-usernames-or-user-ids-not-a
 -security-issue

 Please note, as the checkbox you had to check before creating this ticket
 indicated, Trac is not the right place to report suspected security
 vulnerabilities. https://make.wordpress.org/core/handbook/testing
 /reporting-security-vulnerabilities/#where-do-i-report-security-issues

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/52169#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list