Security patches 7.6.1, 7.5.6, 7.4.13, 7.3.18 and 7.2.13

[guustnieuwenhuis]

Security Vulnerability Fix

What was the issue ?

We've been informed multiple critical and high vulnerabilities in Masa CMS.

What is fixed ?

• The mentioned vulnerabilities have been fixed.

What versions are affected?

Masa CMS versions 7.2, 7.3, 7.4, 7.5 and 7.6 are affected.

What should you upgrade ?

• If you’re on Masa CMS 7.6, you should update to version 7.6.1 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
• If you’re on Masa CMS 7.5, you should update to version 7.5.6 immediately. This can be done by applying a manual update.
• If you’re on Masa CMS 7.4, you should update to version 7.4.13 immediately. This can be done by applying a manual update.
• If you’re on Masa CMS 7.3, you should update to version 7.3.18 immediately. This can be done by applying a manual update.
• If you’re on Masa CMS 7.2, you should update to version 7.2.13 immediately. This can be done by applying a manual update.

If an immediate upgrade is not possible, review the workarounds in the security advisories.

What's Changed

• Unauthenticated Path Traversal improvements
• Unauthenticated Remote Code Execution improvements

Full Changelog: 7.6.0...7.6.1

---

This discussion was created from the release v7.6.1.

[no3rdw]

Hi @guustnieuwenhuis - I'd like to upgrade from a previous 7.5 version to 7.5.6 - are there instructions available on how to perform a manual update?