Thread:Extension talk:Lockdown/Security Flaw

If a user creates a redirect to a protected page while using the Vector skin, the user can access that page regardless of whether they have read access or not.