Repository navigation
Security Vulnerability Fix
What was the issue ?
We've been informed multiple critical and high vulnerabilities in Masa CMS.
What is fixed ?
- The mentioned vulnerabilities have been fixed.
What versions are affected?
Masa CMS versions 7.2, 7.3, 7.4, 7.5 and 7.6 are affected.
What should you upgrade ?
- If you’re on Masa CMS 7.6, you should update to version 7.6.1 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
- If you’re on Masa CMS 7.5, you should update to version 7.5.6 immediately. This can be done by applying a manual update.
- If you’re on Masa CMS 7.4, you should update to version 7.4.13 immediately. This can be done by applying a manual update.
- If you’re on Masa CMS 7.3, you should update to version 7.3.18 immediately. This can be done by applying a manual update.
- If you’re on Masa CMS 7.2, you should update to version 7.2.13 immediately. This can be done by applying a manual update.
If an immediate upgrade is not possible, review the workarounds in the security advisories.
What's Changed
- Unauthenticated Path Traversal improvements
- Unauthenticated Remote Code Execution improvements
Full Changelog: 7.6.0...7.6.1