Improper Access Control in Joomla Workflow Stage Batch Change

Joomla's batch workflow-stage action (WorkflowBehaviorTrait::batchWorkflowStage) recorded an error when the user lacked core.admin permission but did not stop, so a backend user with batch access could still move content they are not allowed to manage to any workflow stage. Only sites with workflows enabled (off by default) are affected. This... Weiterlesen: Improper Access Control in Joomla Workflow Stage Batch Change