Secunia Security Advisory – A vulnerability has been reported in SecretSanta, which can be exploited by malicious users to bypass some security restrictions. The problem is that a new group can be created with the same name as a previously created group, which causes the administrative user of the new group to be incorrectly assigned to the previous group.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35147/sa13261.txt
Source: https://packetstormsecurity.com/files/35147/Secunia-Security-Advisory-13261.html