Skip to content

Helix Ultimate J3 Security Fixes v1.0.3

Latest
Latest

Choose a tag to compare

View all tags
@siddik-web siddik-web released this 31 Aug 07:07
· 346 commits to master since this release
j3-security-v1.0.3
f048d2e

Security Fixes & Improvements

This release addresses an authorization check issue in the blog image deletion endpoint:

  • Object-Level Authorization Enforcement: Enforced strict validation linking blog image removal requests (src) directly to the target article's attributes (helix_ultimate_image and helix_ultimate_gallery). This prevents arbitrary file deletion within the /images/ directory by authorized article authors.
  • Localized Language Strings: Updated deletion failure responses to use the localized HELIX_ULTIMATE_DELETE_FAILED language key.

How to Install / Upgrade

  1. In your Joomla 3.10 administrator panel, go to Extensions → Manage → Install.
  2. Upload and install helixultimate_j3_security_fixes_v1.0.3.zip.
  3. The package will update the necessary files and self-uninstall cleanly.

SHA-256 Checksums

898e7de5c03369bbb8b998e7a133ddd908064f4f85dbce19cf26e93b74ccfd83  helixultimate_j3_security_fixes_v1.0.3.zip
0d3dbbe95da85f96e8b63a8895d89be9899a92e1fa884700aaf0285714d2b490  helixultimate_j3_template_v2.1.4-j3sec.zip
ca0fbb732240f52bc11f3e73d332a93a93f7e835907311cc5e6da14d52b01b27  plg_system_helixultimate_j3_v2.1.4-j3sec.zip
Assets 6
Loading