v8.0.0-alpha.3

[guustnieuwenhuis]

This is an alpha release. It is not intended for production use. Breaking changes are expected.

Overview

This release brings the 8.0 alpha line up to date with the security fixes shipped in Masa CMS 7.6.1. It contains some additional features on top of 8.0.0-alpha.2.

Security Vulnerability Fix

What was the issue ?

The multiple critical and high vulnerabilities fixed in Masa CMS 7.6.1 also affected the 8.0.0-alpha.2 codebase.

What is fixed ?

• The vulnerabilities fixed in 7.6.1 have been merged into the 8.0 alpha line.

What versions are affected?

Masa CMS 8.0.0-alpha.2 is affected.

What should you upgrade ?

• If you're evaluating Masa CMS 8.0.0-alpha.2, you should upgrade to 8.0.0-alpha.3.

What's Changed

• Unauthenticated Path Traversal improvements
• Unauthenticated Remote Code Execution improvements
• Add tests for local file storage and asset browser functionality by @guustnieuwenhuis in Add tests for local file storage and asset browser functionality #458
• Add nginx configuration file for URL rewriting rules by @guustnieuwenhuis in Add nginx configuration file for URL rewriting rules #460

Full Changelog: 8.0.0-alpha.2...8.0.0-alpha.3