Hi,

we have a security issue found.

If we over the backend disable a group. The user can over uploadet pic, it is visible in the activity stream,
comes in to the closed group.

only the group icon is unvisible in the group module, not the uploadet pics.
See the attached pic. here you can see the visible pic.

Please Help ASAP

Best
Michael

Hi Michael,

May I know how to replicate this? do you mean when you share photo and the photo is not visible in the stream?

Waiting your reply then.

Thank you

But, for making sure, I cant see this issue in our beta version 3.2, so this issue should be ok in version 3.2 as well

Hi,

should i by wait for the new Version ?

Best
Michael

Hi Michael,

I suggest yes, because the newest version will be release soon... we released the beta version actually you can get it by register in beta.jomsocial.com

Thank you